DATA CENTER DUEL 


Microsoft woos mainframe users; IBM tries 
to be the big iron on campus. PAGE 10 
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OPINION 


Software users are mad as hell, says Gary H. Anthes, but 
they’re not quite ready to do anything about it. PAGE 40 


RWORLD 


Oracle gobbled up PeopleSoft, which gobbled up 
Ae) Edwards — and Leelee ay DO kon MMB br ence 
headaches are on the way. Here's how to prepare for the 
inevitable and cope with the aftermath. Page 35 


IT Blogging Is One-Sided 


Vendors embrace the 
concept, but users 
are slow to join in 

BY PATRICK THIBODEAU 

Major IT vendors are encour- 


aging employees to start blogs 
to reach out to users in new 


ways and help make the com- 
panies seem less impersonal. 
But so far, the blogging con- 
versation is mostly one-sided. 


As yet, there aren’t many IT 


managers blogging about big- 
picture technology issues, 
based on interviews with ven- 
dors and Internet searches 
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conducted by Computerworld. 
“Clearly, vendors have much 
stronger pressure on them to 
have a relationship with the 
world,” said Tim Bray, director 
of Web technologies at Sun 
Microsystems Inc. But CIO 
blogs would get instant atten- 
tion from vendors, Bray added. 
“If a few of those guys started 
doing that, you can darn well 
bet that we would be reading 
them. I sure would,” he said. 
Among the IT managers 
who do blog is Alex Scoble, 
Blogs, page 16 
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Feds Take Aim at 
_ Spyware, but IT 


Isn't Optimistic 


Users say global scope of problem puts many 
purveyors beyond reach of proposed laws 





BY JAIKUMAR VIJAYAN 

Two antispyware bills that 

were passed by the U.S. 

House of Representatives last 

week could make it easier for | 

law enforcement officials to 

prosecute developers of such 

software and help security 

vendors develop tools 

aimed at blocking the Hi 

programs. Sof 
But the international 

nature of the problem 

makes it unlikely that 

the proposed U.S. laws 

will do much to stanch 

the spread of spyware, several | 

IT managers said last week. | 
“I’m very happy that they 

are trying to do something,” 

said Steve Gelfound, IT oper- | 

ations manager for the En- 

dangered Child Unit of the | 


| Alexandria, Va. “ 


National Center for Missing 
& Exploited Children in 

But it’s really 
hard to try and control the 
Internet.” 

Gelfound added that the 
proliferation of spyware is a 
global problem. “Until every- 

body agrees to get to- 


li gether and do some- 


thing, it’s going to be 
almost impossible to 
stop it,” he said. 
The two bills, which 
were approved by wide 
margins, would impose 
monetary penalties and jail 
terms for people who use 
spyware programs to gather 
information from computers, 
monitor usage and serve up 
advertisements without user 
Spyware, page 45 


DB2 Needs Better Backing 


Users urge IBM to 
help push database 
tocorporateexecs | 


BY MARC L. SONGINI 
DENVER 

If IBM wants corporate exec- 
utives to spend money on its 
database technology instead 
of on rival products, it must 
do a better job of promoting 
the software, said attendees at 


last week’s International DBZ 
Users Group conference here. 
The more IBM pushes DB2, 
users said, the easier it will be 
for them to sell the technolo- 


| gy inside their companies and 


fend off attempts to replace it 
with Oracle or SQL Server. 

“I want IBM to blow its 
own horn more aggressively,” 
said a program analyst at an 
insurance company that runs 

DB2, page 45 
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Software Reuse: 
Making It Work 


In the Management section: DTE 
Energy has set up its own “open- 
source” software operation. Here’s 
how it got in-house developers to 
buy into reuse. Page 37 


6 Users are turning to IBM’s 
Rational portfolio manage- 
ment tools to monitor risks 
and justify investments in 
application development. 


Hewlett-Packard is adding 
support for virtual partition- 
ing to the latest version of its 
HP-UX operating system. 


Clustered storage may re- 
place individual NAS systems, 
say users coping with more 
and more stand-alone arrays. 


Microsoft courts mainframe 
users with Windows servers, 
although some analysts are 
skeptical that the vendor will 
get very far. 


IBM sets a goal of putting 
20,000 students through its 
mainframe curriculum by 
2010 as part of an effort to re- 
place retiring baby boomers. 


Insiders pose a bigger threat 
to corporate security than ex- 
ternal hackers do, making 
tight internal controls a must, 
security pros say. 


Several start-ups are offering 
software designed to collect 
ideas from large groups of 
workers and prioritize which 
suggestions should be pursued. 


3: Hitachi 
replaces employee PCs with 
thin clients in an attempt to 
boost security. 


iv 


Blogging tools aid an interna- 
tional package-tracking soft- 
ware project at a U.K.-based 
courier company. 


| 
| 
| 
| 
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TECHNOLOGY 


26 All Together Now. For systems 
integrators, making technol- 
ogies interoperate is all in a 
day’s work. They share their 
secrets for planning and exe- 
cuting integration projects. 


30 QuickStudy: Supercomputers. 
The term supercomputer is a 
relative one, referring to a 
computer that leads all others 
in performance at the time it’s 
introduced. 


32 Security Manager’s Journal: 
More Than a Token Overhaul 
of the VPN. Mathias Thurman 
gets the green light to deploy 
two-factor authentication to 
improve VPN security, but he 
faces a daunting revamp of 
the existing infrastructure. 


35 When IT Vendors Merge. If 
none of your major vendors 
has been acquired yet, just 
wait. Here’s how to anticipate 
a merger and respond from a 
position of strength. 


38 Q&A: Innovation at the Edge. 
The future lies at the edge 
of your company, where it 
can reach across geographic 
and even competitive bound- 
aries to add value, say authors 
John Hagel III and John Seely 
Brown. 


39 Competing in a New Age. We 
take a look at books on the 
dwindling U.S. talent pool, the 
importance of “obvious” ques- 
tions in project management, 
and what “real time” is really 
all about. 


OPINIONS 


20 Don Tennant thinks the adop- 
tion by many companies of a 
thin-client computing model 
might come from an unex- 
pected catalyst: the prolifera- 
tion of MP3 players. 


20 Michael Gartenberg is tired 
of mediocrity in the hardware 
and software he uses and 
misses the really great stuff 
of days gone by. 


John D. Halamka calls for a 
DNS for patients that would 
give health care providers 
access to medical records, 
without the risks of a national 
health identifier. 


Douglas Schweitzer com- 
pares Linux and Windows for 
business and favors the open- 
source operating system. 


Gary H. Anthes says corpo- 
rate users who are fed up with 
lopsided software licenses 
that give all rights to the ven- 
dor do have some leverage, 
but fighting back takes a lot 
of hard work. 


46 Frankly Speaking: Frank 
Hayes was pleasantly sur- 
prised at how quickly the FBI 
has moved to create a new 
system for information shar- 
ing — and at its ability to 
learn from past mistakes. 
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Record Risks 


In the Technology section: Despite increased regu- 
lation and high-profile million-dollar fines, many 
businesses still aren’t identifying and managing 
corporate records well. The biggest liability is 
e-mail and other unstructured data. Page 21 
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The Joys of Spotlight 

MACINTOSH: Columnist Yuval Kossovsky 
takes the Tiger plunge and installs Mac OS X 
10.4 on his PowerBook. His favorite feature 
so far? Spotlight. @ QuickLink a5910 


Eye on Offshoring 

IT MANAGEMENT: INS’s Scott Warren suggests 
that successful outsourcing always begins 
with an alignment of the IT strategy to the 


overall business strategy. @ QuickLink 54512 


Empioyee Awareness: 

The Missing Link 

SECURITY: Symantec’s regional education 
director offers tips for setting up a security 
training program at your company. 


© QuickLink 54495 


Sun’s Storage Outlook 


STORAGE: According to columnist Steve 
Duplessie, there are several good reasons to 
believe — and disbelieve — that Sun Micro- 
systems is finally getting its act together. 


© QuickLink 25900 


Beyond the Supply Chain 
MOBILE/WIRELESS: RFID is coming, consul- 
tant David H. Williams says, and it will have 
a big impact on both your business and IT 
infrastructure. @ QuickLink 54436 
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U.S. Cancels $1B 
AT&T Telecom Pact 


The U.S. Department of the Trea- 
sury has canceled a $1 billion 
telecommunications contract won 
by AT&T Corp. last December, af- 
ter protests from other bidders 
were supported by the Govern- 
ment Accountability Office (GAO). 
AT&T said it intends to remain “fo- 
cused on how we can best meet 
the Treasury Department’s needs.” 


moos 


CA Sees Profit Dip, 
Is Restating Results 


Computer Associates Internation- 
al Inc. reported a steep fourth- 
quarter profit decline on a 7% in- 
crease in revenue. CA also said it 
plans to restate its financial re- 
ports from 1998 to 2005. 


CA BY THE MBERS 


Appliance Maker 


Cisco Systems Inc. has agreed 
to buy network appliance maker 
FineGround Networks Inc. in 
Campbell, Calif., for about 

$70 million in cash. Cisco plans 
to use FineGround’s technology 
to provide advanced application 
acceleration across networks for 
the secure delivery of Web-based 
applications. The close of the 
deal is expected by midyear. 


GAO Criticizes DHS 
Cybersecurity Plan 


The U.S. Department of Home- 
land Security must do more to 
protect the nation’s critical infor- 
mation infrastructure, according 
to a GAO report. While the de- 
partment has begun efforts to ful- 
fill its cybersecurity duties, it still 
must develop national cyberthreat 
and vulnerability assessments 
and contingency plans - including 
a plan for recovering key Internet 
functions, the report said. 





NEWS 


Users Seek ‘Iools to 
Ease Project Risks 


Portfolio management software can 
help align business, IT project goals 





BY HEATHER HAVENSTEIN 
LAS VEGAS 
NTERPRISES are turn- 
ing to project manage- 
ment tools to monitor 
risks and justify in- 
vestments for application de- 
velopment efforts. 

Users at IBM’s Rational 
Software Development Con- 
ference here said last week 
that tools like IBM’s Rational 
Portfolio Manager are helping 
development groups better 
align projects with overarch- 
ing business goals. 

International Paper Co. 
turned to IBM’s portfolio man- 
agement product to provide 
visibility into its complex de- 
velopment pipeline, said Mark 
Towne, senior manager of IT 
solutions and services at the 
Stamford, Conn.-based firm. 

“We were flying blind — we 
had 600 to 700 projects going 
on, [but] we had no handle on 
(whether we could] deliver 
what was in the pipeline,” 





i There was no 
process in our 
$26 billion company 
for deciding how our 
IT spending was 
going to get done 
strategically. 


MARK TOWNE, 
INTERNATIONAL PAPER 


Towne said. “There was no 
process in our $26 billion 
company for deciding how our 
IT spending was going to get 
done strategically.” 

Beginning in January, the 
paper company required that 
all new development projects 
be managed in the Rational 
system. Now International Pa- 
per has 439 proposals, 427 
projects and more than 1,100 
application enhancements be- 
ing planned and monitored in 
the system, Towne said. 


New IBM Rational Head Talks Priorities 


LAS VEGAS 


Daniel Sabbah, who joined IBM 
in 1974, was recently named gen- 
eral manager of IBM's Rational 
division, which makes develop- 
ment and testing tools. He previ- 
ously served as vice president of 
strategy and architecture in 
IBM's software group. Sabbah 
spoke with Computerworld last 
week during the Rational Soft- 
ware Development Con- 

ference here. 


What will be your top 
priorities as the new 
general manager at 
Rational? To grow the 
business, the appeal of 
the Rational tools and 
methodology world - 


both from a pure business stand- 
point in terms of revenue, but 
also in constituencies. 

So far, Rational has been ex- 
tremely valuable to a set of core 
software engineers. We want to 
stick with that constituency. But 
we also want to start appealing 
to broader constituencies of de- 
velopers, as well as starting to 
play into the connections be- 

tween software engi- 
neers and business ana- 
lysts, and the connection 
between software engi- 
neers and operations 
and deployment issues. 
I'd like to take in more of 
the collaboration capabil- 
ities we have in our Lotus 
portfolio. 


The company can check 

| potential development proj- 
ects against business goals 
earlier in the process, he said. 
Portfolio management “can be 
a weapon to drive shareholder 
value” by identifying and re- 
jecting early on projects that 
won't provide a healthy return 
on investment, he added. 

IBM is one of a number of 
vendors selling IT portfolio 
management tools, said David 
Kelly, president of Upside Re- 
search Inc. in Newton, Mass. 
Some suppliers, like Com- 
puware Corp., have long sold 
such tools, he said. Others 
in this business include Bor- 
land Software Corp., Oracle 
Corp., Mercury Interactive 
Corp., Microsoft Corp. and 
ProSight Inc. 

IBM joined the fray late last 
year with its acquisition of 
Systemcorp ALG Ltd. and its 
PMOffice tool [QuickLink 
50069]. The vendor plans to 
update the tool at some point 
to provide a direct feed from 


folio Manager, said Roger 
Oberg, Rational’s vice presi- 





What are the biggest pain 
points in IT development 
shops, and how will you mold 
the product offerings to meet 
those needs? The pressure is re- 
ally on return on investment. Over 
the years, we have disconnected 
ourselves as software engineers 
and as IT implementers. We've 
focused on technology, and we 
haven't done a good enough job 
of relating that technology to 
business needs. Giving enterpris- 
es the tools and the capabilities 
to be much more successful in 
bridging that gap between where 
the business wants to go is crucial 
to that type of transformation. 


What does IBM’s recent ac- 

quisition of open-source ven- 
dor Gluecode Software mean 
from a tools perspective? Our 


development products to Port- 





www.computerworld.com 


dent of product marketing. 

Kristin Leard, an architect 
at Hartford Financial Services 
Group Inc. in Hartford, Conn., 
said her company is looking at 
the IBM tool’s dashboard fea- 
ture, which is designed to pro- 
vide tables, maps and graphi- 
cal displays of status and com- 
parisons to detail ROI and 
payback of projects. 

Karen Abernathy, senior 
technical consultant at HSBC 
Bank PLC in New York, said 
her company is eyeing Portfo- 
lio Manager to provide trans- 
parency and ensure that the 
company is choosing the right 
projects to gain business value. 

Visa U.S.A. Inc. is rolling 
out Portfolio Manager to help 
display the status of develop- 
ment progress to upper man- 
agement. Visa has used Ratio- 
nal’s RequisitePro require- 
ments management tool to 
monitor the risks and progress 
of IT projects. 

“We want [project man- 
agers] actually mitigating risk 
throughout the project,” said 
Michael Levine, project man- 
ager at Foster City, Calif.- 


based Visa. @ 54679 


MORE ONLINE 


IBM's Rational unit introduced tools that 
link testing and development apps with 
Tivoli systems management software 


QuickLink 54661 
www.computerworld.com 


acquisition of Gluecode was a 
sign that says “Open-source is 
here to stay.” Open-source is an 
evolution of where software is 
going. It is something that you 
have to pay attention to. 


What is your take on Micro- 
soft’s planned entry into Ra- 
tional’s traditional stronghold 
of team development with its 
Visual Studio 2005 Team 
System? | welcome the compe- 
tition. They've got a long way to 
go on the team side and model- 
driven development side. | don’t 
think they will ever be able to 
match our ability to take the 
model-driven design, to take the 
team side and map it to as strong 
or open or broad a middleware 
portfolio as what we can do. 

- Heather Havenstein 
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HP’s Unix Servers to Get Virtualization Boost 


OS update will add partitioning 


BY ROBERT McMILLAN 
Hewlett-Packard Co. is putting 
the finishing touches on an 
updated release of its HP-UX 
operating system that will add 
virtual partitioning capabili- 
ties to the company’s Itanium- 
based Integrity servers. 

The update will also make 
the virtualization technology 
available to users of the HP 
9000 server line who want to 
install the latest version of 
HP-UX. Mary Ellen Lewan- 
dowski, director of Unix prod- 
uct marketing at HP, said last 
week that the update is due in 
early July as a patch to HP-UX 
lli v2. 

The Virtual Partitions fea- 
ture, known informally as 
vPars, lets users install more 
than one copy of HP-UX ona 
computer. The upcoming re- 
lease marks the first time vPars 
has been offered for the Integ- 
rity systems, which use Intel 
Corp.’s Itanium 2 processors. 

For years, HP has included 
the technology in the HP 9000 
machines, which are based on 
its own PA-RISC chips. But 
HP-UX lili v2, the first version 
of the operating system that 


support | 


| offers identical feature sets for 


both server lines, lacked sup- 


| port for vPars when it was re- 

| leased late last year. As a re- 

| sult, many HP 9000 users have | 
| held off on installing the new 


| software. 


| As far back as last August’s HP 


| Eager Users | 


| World user conference, cus- 
| tomers began asking when 





| question that came up at HP 


| criticism for being slow to add 
| features to HP-UX, Protter 


| HP would ship the upcoming 


release with the virtualization | 
capabilities, said Steven Prot- | 


| ter, a Chicago-based HP-UX 


consultant. “The biggest 


World 2004 was, ‘When is 
vPars support going to hap- 
pen?’ ” he said. 

Though HP has faced some 


said he’s satisfied with its ap- 
proach. “HP’s attitude is to be 
reliable, and they don’t have a 
problem with holding a re- 
lease to make sure it’s quality- 
tested,” he said. “They'd rather 
be late than wrong.” 

By enabling the use of vPars 
with the Integrity line, HP is 
delivering a “sorely needed” 





Alcatel Adds Switches to 
Link Wired, Wireless LANs 


BY MATT HAMBLEN 
Alcatel this week will an- 
nounce a second generation of 
wireless LAN switches, adding 
functionality that further ex- 
tends the security and man- 
agement capabilities of wired 
networks to WLANs. 

Alcatel is adding seven 
switches made by Sunnyvale, 
Calif.-based Aruba Wireless 
Networks to its OmniAccess 
WLAN switch family, which 
debuted in March 
2004 with a series of 
devices also devel- 
oped by Aruba. 

The new switches 
will give IT adminis- 
trators the ability to 
integrate LAN-based 


management tools from other 
vendors and Alcatel’s own 
OmniVista software with Wi- 
Fi networks, said Brian Witt, 
director of product marketing 
at Paris-based Alcatel, which 
has its U.S. headquarters in 
Calabasas, Calif. 

New software from Alcatel 
will extend LAN security 
functions, such as attack con- 
tainment capabilities, to Wi-Fi 





networks, Witt added. Other 


Alcatel’s OmniAccess WLAN 


capability, said Tony Iams, an 
analyst at Ideas International 
Inc. in Port Chester, N.Y. But, 


| he added, the company still 


lags behind rivals such as IBM 
and Sun Microsystems Inc. on 
support for virtualization. 

HP said that to address that 


| functionality gap, it’s develop- 


ing more-powerful virtualiza- 


tion technology that’s expect- 

| ed to ship by year’s end. 
In addition to vPars, the 

| July update to HP-UX will in- 

clude a feature calied Secure 
| Resource Partitions, which 
| will let users separate several 
| applications on one copy 
| of the operating system, 
| Lewandowski said. 


HP Readies Last PA-RISC Chip 


HEWLETT-PACKARD this week 
plans to formally announce the 
final processor upgrade to the 
HP 9000 server line plus the 
first models of its NonStop fault- 
tolerant systems that are based 
on Intel's Itanium 2 chips. 

The new PA-8900 processor 
for the HP 9000 will have a 
much larger Level 2 memory 
cache than its predecessor but 
will operate at clock speeds that 
are only slightly faster, according 
to information posted on HP's 
Web site. The PA-8900 will be 
sold in 800-MHz, 1-GHz and 1.1- 
GHz versions with 64MB of on- 
chip cache, compared with a 
maximum clock speed of 1.1 GHz 
and a 32MB cache on the exist- 


security features include cen- 
tralized encryption for 802.1li 
firewalls, with the switches 
assigning access rights to end 
users and then applying those 
privileges no matter where a 
user connects to a network. 

Gordon College in Wenham, 
Mass., plans to install one of 
the new switches this summer 
as an upgrade to its existing 
OmniAccess device, said Russ 
Leathe, director of networking 
and computer services at the 
1,500-student college. 

Leathe said he welcomes 
further integration of manage- 
ment and security functions 
for the school’s wired 
networks and Wi-Fi 
LANs. “We cannot afford 
to maintain multiple ven- 
dors’ solutions and ex- 
pect them to integrate,” 
he said, noting that at 
colleges especially, IT 


ing PA-8800 processor. 

The new chip is the last in the 
line of HP’s PA-RISC processors. 
The company has said it will sup- 
port the HP 9000 servers that 
use PA-RISC chips until 2011, but 
it has abandoned further devel- 
opment of the processors as part 
of its embrace of Itanium 2. 

The PA-8900 was expected 
to have clock speeds in the 
range of 1.2 to 1.5 GHz. But Ideas 
International analyst Rich Par- 
tridge said it isn’t surprising that 
HP decided to release such a 
modest processor update, given 
that the company has bet its fu- 
ture on Itanium-based Integrity 
hardware and is trying to boost 
the line's use. 


staffers are few in number and 
have to wear many hats. 
Integrating management of 
wired and wireless LANs has 
become a priority for many 
network managers, noted John 
Miles, vice president of IT 
operations at Mooresville, 
N.C.-based Lowe’s Cos., which 
operates about 1,100 home 
improvement retail stores. 
“Passing [Wi-Fi] security to 


initely needed,” said Miles, 
who hasn’t evaluated Alcatel’s 
product offering. 

Smaller vendors began of- 
fering integrated networking 
products three years ago, said 
Zeus Kerravala, an analyst at 
The Yankee Group in Boston. 
But the top vendors have 
started catching on more re- 
cently, he added. For example, 
Cisco Systems Inc. jumped on 
the bandwagon through its ac- 





hardened environments is def- | 
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HP is also working to add 
support for Veritas Software 
Corp.’s clustering and ad- 
vanced file-system technolo- 
gies to HP-UX. That will be 
included in a subsequent up- 
date due sometime between 
August and early October, ac- 
cording to Lewandowski. 


@ 54646 


McMillan writes for the 
IDG News Service. 


Giving HP 9000 users a big- 
ger CPU performance boost 
would “allow them to be comfort- 
able staying on PA-RISC for a 
longer amount of time,” Partridge 
noted. “I don’t think HP wants to 
prolong the transition.” 

The Itanium-based Integrity 
NonStop systems being an- 
nounced this week were initially 
targeted for release late last year 
[QuickLink 44650]. They are re- 
placing models based on chips 
from MIPS Technologies Inc. in 
Mountain View, Calif. HP said the 
new servers will be capable of 
running one copy of its NonStop 
operating system across as many 
as 4,080 processors. Shipments 
are due to begin in July, with 
prices starting at $400,000. 

- Robert McMillan 


| quisition of Airespace Inc. ear- 
lier this year. And Nortel Net- 


works Ltd. last year agreed to 


| resell WLAN switching tech- 
| nology from Trapeze Net- 
| works Inc. in Pleasanton, Calif. 


But Richard Webb, an ana- 


| lyst at Infonetics Research in 
Boston, said the process of inte- 
| grating wired and wireless net- 
| work management is still in its 
early stages. 


“The whole point is to have 
converged networks and per- 
form the same set of criteria 


| on a wired or wireless device,” 


Webb said. “It’s creating sim- 


| plicity so the poor network 
manager isn’t having to juggle 


two networks.” @ 54684 


_ READ MORE ONLINE 


| For additional coverage of wireless topics, 


visit our Web site: 


QuickLink k1000 
www.computerworld.com 
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Qwest Gives Up on 
Purchase of MCI 
Qwest Communications Interna- 
tional Inc. has abandoned its pur- 
suit of MCI Inc. Qwest said it was 
no longer in its best interest to 
pursue the global long-distance 
and data carrier. MCI said it ac- 
cepted Verizon Communications 
Inc.’s $26-per-share bid over a 
$30-per-share proposal from 


Qwest in part because of Veri- 
zon’s greater financial stability. 


Lenovo to Build 
U.S. Laboratory 


Chinese PC maker Lenovo Group 
Ltd. plans to open a development 
center in North Carolina to collab 
orate with partners - including 
IBM, Intel Corp., Microsoft Corp., 
Symantec Corp. and LANDesk 
Software Inc. - on new personal 
computing technologies. The cen- 
ter will be staffed by engineers, 
programmers and product devel- 
opers from the partner companies. 


PalmSource Sells 
Name, CEO Resigns 


PalmOne Inc. said it has agreed to 
pay PalmSource Inc. $30 million 
for full rights to the Palm brand 
name, just one day after Palm- 
Source CEO David Nagle re- 
signed. The Palm brand name had 
been co-owned by the two com- 
panies since PalmSource was 
spun off from Palm Inc. in Octo- 
ber 2003. Senior Vice President 
Patrick McVeigh was named in- 
terim CEO of PalmSource. 


Best Launches 
Hosted CRM Plan 


Five years after it bought midmar- 
ket business applications vendor 
Best Software Inc., U.K. software 
maker The Sage Group PLC has 
changed Best’s name to Sage 
Software. The renamed unit also 
revamped its portfolio in an effort 
to enter the hosted CRM business 
with SageCRM.com, a rebranded 
version of its Accpac accounting 
and sales software. 





NEWS 


Clustering Challenges 
Storage Stronghol 


| Spread of stand-alone systems prompts 
efforts to improve NAS management 





BY LUCAS MEARIAN 
LUSTERED STORAGE 
technology has 
emerged as a means 
for meeting a grow- 

ing corporate need to better 

manage an ever-growing sup- 
ply of network-attached stor- 


| age (NAS) devices. 


The technology allows IT to 
consolidate the management 
and increase the scalability 
of NAS, so much so that ob- 
servers expect that it will one 
day replace the individual 
NAS box. 

Sonja Erickson, vice presi- 
dent of technical operations at 
Kodak Easy Share Gallery, a 
service of Kodak Imaging Net- 
work Inc. in Emeryville, Calif., 
said NAS clustering technolo- 
gy has already saved her com- 
pany hundreds of thousands of 
dollars in personnel costs alone. 

“In terms of staffing, since 
we installed [a NAS cluster 
from Isilon Systems Inc.] a 
year and a half ago, we’ve 


| NetApp Unve 


FOLLOWING a trend among 
storage vendors that are pushing 
high-end functionality into lower- 
end systems, Network Appliance 
last week introduced two mid- 
range network-attached storage 
boxes that offer 50% better per- 
formance than the company's 
highest-end NAS boxes. 

The arrays can be configured 
with either low-cost Serial Ad- 
vanced Technology Attached 
(SATA) drives or high-performance 
Fibre Channel disk drives, offi- 
cials said. 

Cendant Corp., a $19 billion 
hotel franchise that owns Days 
Inn Worldwide Inc. and Super 8 
Motels Inc., uses 20 NetApp fil- 
ers with a total of 45TB of capac- 
ity. Glenn Harper, director of data 





hired no additional staff,” 

she said. “That’s hundreds 

of thousands of dollars saved. 
In terms of efficiency, it takes 
only a day to get the systems 


| up and running.” 


The Kodak unit uses clus- 
tering technology from both 
Isilon and Beaverton, Ore.- 
based PolyServe Inc. to con- 
nect hundreds of Wintel 
servers at Kodak that host its 
online digital photo image ser- 
vice. Erickson uses a staff of 
five to manage more than a 
petabyte of data on the servers. 

Prior to installing NAS 
clusters, Erickson used direct- 
attached SCSI arrays that 
lacked scalability and could 
take up to a month and a half 
to get online. In contrast, the 
PolyServe boxes take about a 
week to get online, she said, 
and Isilon’s take about a day. 

To date, most of the major 
storage vendors — Hewlett- 
Packard Co., EMC Corp., Hi- 
tachi Data Systems Corp. and 


strategy at New York-based Cen- 
dant, said the company plans to 
add FAS3000 models during the 
next year. 

The price/performance gains 

: inthe new midrange systems 

> will let Cendant use fewer high- 
end NetApp boxes, such as the 
FAS960 and FAS980 arrays, 
according to Harper. 

The NetApp FAS3000 series 
arrays provide four times the 
capacity of previous-generation 
midrange arrays. The FAS3020 
can scale to 50TB and the 
FAS3050 to 84TB. 

: — Inaddition, the new systems 

> mark the first time Sunnyvale, 

> Calif.-based NetApp is offering a 

> RAID 6 configuration on a NAS 

: box. RAID 6 allows an array to 





ils Midrange NAS Array 


Network Appliance Inc. — 
have released technology that 


| can virtualize NAS systems by 


pooling disk capacity behind 


| NAS engines. All have said 


that they are either developing 


| or evaluating third-party clus- 


tering technology as well. 
Meanwhile, start-ups Isilon, 


| PolyServe and Panasas Inc. 


in Fremont, Calif., are already 
offering clustering software 
that runs across Windows and 


| Linux. 





www.computerworld.com 


Pushan Rinnen, an analyst 
at Gartner Inc. in Stamford, 
Conn., suggests that the clus- 


| tering technology will ease 


management headaches better 
than the older virtualization 
technology. 

Philip Rosedale, founder 
and chief technology officer of 
Linden Research Inc., a maker 


| of online entertainment sys- 


tems in San Francisco, said he 
has attained “extremely high 
I/O throughput” with a NAS 
cluster from Isilon that he in- 
stalled about six months ago. 
“We would have spent a lot 
more money and would have 
taken a lot more time with a 
traditional array,” he said. 


@ 54675 


Clustered Storage Traditional NAS 


PROS # Cobbles inexpensive com- 


modity servers together 
= CPU workload is shared 
among boxes for 

linear scalability 


= Automatic load balancing 


® Still a niche technology 
= Typically limited to high- 
performance Linux server 


handle a failure of any two drives 
without loss of data or downtime. 

“All the stuff you used to get 
on the midrange line, you're see- 
ing that same technology ported 
down to the midrange,” said 
John Kelly, vice president of 
technology at Jefferson Pilot 
Financial Insurance Co. 

Kelly has NetApp FAS800 and 
FAS900 series boxes spread 
among five campuses in the 
U.S. He plans on purchasing 
FAS3000 series NAS arrays for 
their “flexibility and for cost con- 
trol” by early next year. 

Natalya Yezhkova, an analyst 
at market research company IDC, 
said that during 2004, major 
storage vendors added entry- 
level and midrange products that 


= Simple to install and manage 
® Scales well 
@ Reliable 


= Requires separate manage- 
ment of each box 

8 if one NAS head fails, per- 
formance can be affected on 
the second 


: were “often accompanied by 


more-sophisticated software that 


was previously available only on 
: high-end systems.” 


IDC analyst Brad Nisbit said he 


: likes NetApp's mixed-drive offer- 
: ing. “The midrange is the perfect 
: target right now,” he said. “We 

: have seen most [EMC] Clarion 

> CX units ship with at least one 

: shelf of ATA disks. The difference 
> now for NetApp is that they are 

: Officially embracing ATA technol- 
> ogy for primary storage.” 


Meanwhile, NetApp also 


: debuted two V-Series, formerly 

: G-Series, virtualization gateway 

: devices - the NetApp V3020 and 
: V3050 - based on the new 

: FAS3000 series. The gateways 

= canuse HP, EMC or IBM disk 

: subsystems as back-end storage. 


~- Lucas Mearian 
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Microsoft Courts Mainframe 
Shops, Pushes Windows Use 


Vendor holds first migration event; 
some users tout cost benefits of switch 





BY CAROL SLIWA 
WAPPING OUT big-iron 
boxes in favor of Win- 
dows servers may not 
be the hottest of IT 

trends. But at its first Main- 

frame Migration Conference 
last week, Microsoft Corp. said 
it’s making steady progress 
with its efforts to court main- 
frame users. 

Three mainframe-to-Win- 
dows converts at the Chicago 
event pointed to expected cost 
reductions, one of the main 
benefits that Microsoft has 
been touting since it forged 
the Mainframe Migration Al- 
liance with Micro Focus Inter- 
national Ltd. in April 2004. 

Microsoft said the alliance 
now includes over 50 software 
vendors, systems integrators 
and other companies that offer 
products and services aimed 
at helping users migrate off 
mainframes. The vendor not- 
ed that the conference drew 
more than 200 attendees. 

But Dale Vecchio, an analyst 
at Gartner Inc., said users are 
more likely to switch to Unix 
than Windows if they move 
off the mainframe. He rated 
Microsoft’s chances of making 
a big impact on mainframe 
users at less than 20%. “It’s a 
completely different culture,” 
Vecchio said. “Shifting from a 
multitasking mainframe envi- 
ronment running mixed batch 
and online [jobs] to Windows 
is a big shift.” 

Some mainframe users were 
ripe to make a change, though. 
For example, Glen MacGregor, 
assistant vice president of 
business systems at Lombard 
Canada Ltd. in Toronto, said 
the firm’s IT department pro- 
posed replacing its IBM main- 
frame at budget time last year. 
Lombard’s analysis showed 
that IBM’s z/OS operating sys- 
tem and various mainframe 
tools would cost about $1 mil- 





lion per year more than run- 
ning a Windows-based envi- 
ronment would, he said. 

So the company hired Cratos 
Technology Solutions Inc. in 
Oakville, Ontario, to migrate 


| 4,800 programs running on the 


mainframe to Windows. Cratcs 
CEO Andrew Wickett said 
92.3% of the Cobol code re- 
mained intact when the first 
application was migrated using 
Micro Focus tools. 


The company plans to do a 
“grand slam” conversion next 
March, MacGregor said. He 
added that Lombard expects a 
return on its investment in the 
first year after the switch. 

Willem Gorter, a Paris-based 
program manager at AtosEuro- 
next, a joint venture between 
the Euronext trading exchange 
and IT services firm Atos Ori- 
gin SA, said the biggest costs 
associated with mainframes 
are the salaries of the workers 
needed to run them. 

AtosEuronext’s Amsterdam 
office recently moved six ap- 








Shifting from 
a multitasking 
mainframe environ- 
ment running mixed 
batch and online 
[jobs] to Windows 
is a big shift. 


DALE VECCHIO, ANALYST, 
GARTNER INC 


plications, including securities 
referential data administration 
for the Amsterdam exchange, 


IBM Plugs Big Iron to the College Crowd 


Aims to fill IT 
vacancies as baby 
boomers retire 


BY THOMAS HOFFMAN 

IBM is trying to convince 
growing numbers of young 
engineers that the mainframe 
isn’t dead yet. 

For example, thousands of 
college students have partici- 
pated in an IBM-created main- 
frame training and curriculum 


| program that’s aimed at gen- 


erating interest and building 
skills in the field as baby 
boomer IT workers near 
retirement age. 

Since its launch two years 
ago, more than 130 colleges 
and universities worldwide 
have joined the IBM Academic 
Initiative. Under the program, 
IBM helps schools develop 
and share mainframe-related 
curricula, said Mike Bliss, 
director of zSeries technical 
support and marketing at IBM. 

Some students say the pro- 
gram is awakening a previous- 
ly unknown interest in main- 
frame technology. “I wouldn’t 
have been interested in the 
mainframe [much] at all if I 
hadn’t been exposed to” the 
IBM program, said Joshua 
Smith, a 24-year-old program- 


mer/analyst at The Timken 
| Co., a Canton, Ohio-based 
bearings manufacturer. 

While a senior mathematics 
major at Canton-based Mal- 
one College in 2003, Smith 
took an assembler program- 
ming course offered through 
the IBM program. The course 
also contributed to his landing 
a job at Timken. 

Prior to taking the class, 
said Smith, “my opinion of the 
mainframe was that it was a 
dying breed.” But during the 
program, a trusted professor 
told Smith that mainframes 


IBM Academic 
Initiative 
WHAT IT IS: A program the ven- 
dor launched two years ago to 


encourage college students to 
study mainframe computing. 


WHAT IT OFFERS: The initiative 
lets students and faculty at more 
than 130 universities and colleges 
worldwide access mainframes for 
lab work. IBM also works with 
colleges to develop curricula. 


WHO'S INVOLVED: Thousands 
of computer science students 
have already participated. IBM 
has a goal of putting 20,000 peo- 
ple through the program by 2010. 





AT A GLANCE 





are still very much in use and 
that employers continue to re- 
cruit workers with those skills. 
For instance, American Fi- 
delity Assurance Co. still 
processes roughly 75% of its 
workload on mainframes, said 
John Schille, CIO at the Okla- 
homa City-based company. 
“We would be interested in 
supporting university educa- 
tion geared toward training in 
this environment to supple- 
ment staff replacement needs, 
specifically upcoming retire- 
ment issues,” Schille said. 


Preparing for the Future 
Schille isn’t alone. Over the 
past few years, LexisNexis 
Group, a legal research pro- 
vider in Dayton, Ohio, has 
hired a handful of entry-level 
IT workers with mainframe-re- 
lated experience, said Allan 


| McLaughlin, senior vice presi- 


dent and chief technology offi- 
cer. “The potential retirement 

[of] some of our very specific 

mainframe talent keeps me up 
at night,” he said. 

IBM isn’t expecting a mass 
exodus of mainframe talent, 
said Bliss. “But we do need to 
get some younger folks started 
to build those skills,” particu- 
larly since it takes a few years 
for IT workers to embrace the 








from a mainframe to two clus- 
tered single-processor servers 
running Windows. The overall 
migration also included a shift 
of its core clearing and cash 
trading applications to a 
Hewlett-Packard NonStop sys- 
tem in Paris and its derivatives 
trading systems to Sun Solaris 


servers in London. 


The company calculated 
that it would have spent close 
to $454,000 per month if it 
had kept the remaining six ap- 
plications on the mainframe, 
Gorter said. Running them on 
Windows will cost $88,000 
per month, with the savings 
coming largely from the 
elimination of 30 mainframe 
staffers. Only six are needed to 
support the Windows systems, 
and they can also do other 


| tasks, Gorter said. @ 54678 


complexity of the environ- 
ment, he said. 

According to Bliss, last Oc- 
tober IBM set a goal of putting 
20,000 people through the 
program by the end of 2010. 

Earl Rodd, an assistant pro- 
fessor of computer science at 
Malone College, said that the 
school got involved in the IBM 
program in early 2003 because 
mainframes are a “significant” 
part of corporate computing. 
“Our [computer science] pro- 
gram is intentionally broad in- 
stead of deep in order to ex- 
pose people to a lot of things 
they probably haven't seen be- 
fore,” he added. 

Chris Baran, a sophomore 
computer science major at 
Clarkson University in Pots- 
dam, N.Y., who is interning at 
IBM this summer, is active in 
the New Hire forum, a group 
of IBM Academic Initiative 
students and customers that 
is trying to interest students 
in studying the mainframe. 

The group is planning to 
launch a z/OS programming 
contest in August in which 
student participants will have 
access to mainframes at Marist 
College in Poughkeepsie, N-Y. 
“The main focus of our contest 
is to get students excited about 
working with the mainframe,” 
said Baran. “We’re trying to get 
people to realize that main- 
frames are not dead.” @ 54671 
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Novell Posts Loss 
On 1% Sales Growth 


Novell Inc. said significant invest- 
ments made to reposition the 
company led to a $15.8 million 
second-quarter loss. Sales rose 
slightly in the quarter. 


co oe 
ce 
Sueltz Resigns From 
Salesforce.com Post 


Patricia Sueltz has resigned from 
Salesforce.com Inc. just over a 
year after the hosted CRM pro- 
vider poached her from Sun Mi- 
crosystems Inc. to oversee its 
marketing and operations. Sueltz 
joined Salesforce.com several 
months before an initial public 
offering that left Salesforce.com 
with a market valuation of more 
than $1 billion. She previously 
headed Sun's services group. 


AT&T Nabs Deals 
Worth $14.5M 


AT&T Corp. has won two con- 
tracts totaling $14.5 million from 
American Builders & Contractors 
Supply Co. (ABC) and Kaman 
Corp. Under the $8.5 million pact 
with ABC, a wholesale distributor 
of roofing and siding materials, 
AT&T will provide an IP virtual 
private network. The $6 million 
deal with Kaman, a maker of mili- 
tary and aerospace equipment, 
calls for AT&T to provide data and 
voice networking services. 


MCI Evaluates Data 
Security Options 

MCI Inc. is evaluating new corpo- 
rate security technologies follow- 
ing the theft of a notebook com- 
puter containing personal infor- 
mation, including Social Security 
numbers, of about 16,500 current 
and former employees. The miss- 
ing data was stored on a laptop 
that was stolen last month from a 
car parked in the home garage of 
an MCI financial analyst. 





_ NEWS 


Security experts cite need for strong 
internal controls to prevent data thefts 


BY JAIKUMAR VIJAYAN 
HE RECENT rash of 
data compromises 
at large companies, 
several of them 

caused by insiders, highlights 

the need for IT managers to 
develop tight internal controls 
for monitoring and enforcing 
compliance with corporate 
data-usage policies. 

But the trend among com- 
panies to open up their net- 
works to suppliers, contrac- 
tors, business partners and 
customers is making that an 
increasingly difficult task to 
accomplish, according to secu- 
rity analysts. 

Just last week, Bank of 
America Corp. disclosed that 
information on about 60,000 
of its customers had been 
stolen by a New Jersey-based 
data-theft ring that also 
allegedly took electronic 
account records from three 
other banks. The ring, which 
police said included eight 





employees from the four 
banks, is accused of systemati- 
cally stealing account data on 


| a total of nearly 700,000 cus- 


tomers [QuickLink 54542]. 
Both the bank thefts and a 
similar incident involving data 

aggregator ChoicePoint Inc. 
that came to light earlier this 
year were allegedly perpetrat- 
ed by end users who had legit- 
imate access to the data they 
took, said Michael Rasmussen, 
an analyst at Forrester Re- 
search Inc. 

“This kind of breach poses 
a much bigger threat than the 
traditional hacker,” Rasmussen 
said. That’s especially true for 
large enterprises with global 
operations and suppliers, as 
well as offshore outsourcing 
relationships, he added. 

Kim Milford, information 
security officer at the Univer- 
sity of Rochester in New York, 
said she thinks the best way to 
address insider security issues 
is to establish an ongoing 


Insider Threats Mount 


awareness program. Such a 
program needs to be tailored 
for different groups, including 
IT staffers, end users, corpo- 
rate executives and external 
partners, she said. 

Also crucial is the need for 
administrative controls, such 
as job descriptions that spell 
out security responsibilities, 
acceptable data-use guidelines 
and confidentiality agree- 


| ments, Milford said. “IT man- 
agement tends to throw tech- 


Se 
Miticatina Insid 
Security Threats 


SET AND ENFORCE password 
and remote access policies. 


techniques to help detect maii- 
cious code in systems. 


SOURCE: REPORT ISSUED BY THE 
U.S. SECRET SERVICE AND THE CERT 
COORDINATION CENTER 


www.computerworld.com 


nical controls at security ex- 
posures instead of thinking of 
the good old-fashioned human 
factors,” she noted. 

Companies also need to 
have good password, user ac- 
count and configuration man- 
agement practices, as well as 
processes for disabling net- 
work access when employees 
are terminated, according to a 
report issued May 16 by the 
U.S. Secret Service and the 
CERT Coordination Center at 
Carnegie Mellon University. 

In addition, formal processes 
are needed for handling em- 
ployee grievances and moni- 
toring reactions to events such 
as workers being reprimanded 
or passed over for promotions, 
the report said. Those findings 
are based on an investigation 
of 49 cases of insider attacks 
via computer systems between 
1996 and 2002. 

“In 92% of the cases, a nega- 
tive work-related event trig- 
gered the insider action,” said 
Matt Doherty, a special agent 
in charge of the Secret Ser- 
vice’s National Threat Assess- 
ment Center. The good news, 
though, is that most of the at- 
tacks were planned and not 
impulsive acts, which are hard 
to prevent, he said. @ 54681 





Start-ups Push Apps for 
Tracking Corporate Ideas 


BY JAIKUMAR VIJAYAN 
Bright Idea Inc., one of several 
small vendors offering soft- 


| ware for managing corporate 


innovations, this week will in- 
troduce a hosted service de- 
signed to help users collect 
and prioritize new ideas and 
then track their development. 
The Web-based service is 
aimed at midsize companies 
and divisions of larger organi- 
zations that are looking to 
source ideas from wider 
groups of employees than they 
usually rely on, said Matthew 
Greeley, president of New 
York-based Bright Idea. Com- 
panies could use the service 
in product development or as 
part of business process im- 
provements and cost-cutting 
activities, he added. 





In concept, innovation man- 
agement tools like the ones 
developed by Bright Idea are 
similar to product life-cycle 
management (PLM) applica- 
tions in that they give compa- 
nies a central repository for 
gathering and managing new 
ideas, said Navi Radjou, an an- 
alyst at Forrester Research Inc. 

Radjou noted that the soft- 
ware provides workflow and 
analytics capabilities for iden- 
tifying, categorizing and rank- 
ing good ideas and routing 
them to the right people. “In a 
sense, PLM takes over where 
idea management leaves off,” 
he said, predicting that some 
some of the companies in the 
market may eventually be 
bought by PLM vendors. 

Robert Bosch Tool Corp., 





a maker of power tools in 
Mount Prospect, IIl., is using 
Bright Idea’s innovation man- 
agement suite to consolidate 
ideas from across its different 
product groups. The company 
recently conducted a two- 
week campaign soliciting 
ideas from all of its employees 
on how to improve one of its 
products, said Peter Neumann, 
Bosch’s innovation manager. 


Creating a Wish List 
Bright Idea’s software allowed 
employees to submit their 
ideas to a central database, 
where 143 responses were vet- 
ted by marketing and engi- 
neering teams and assigned 
ranks based on how good the 
ideas were. “Some of the top 
ideas were integrated into the 
marketing wish list for the 
next generation of the prod- 
uct,” Neumann said. 

“Idea and innovation man- 
agement software tools can 





have a fairly high impact,” said 
Jonathan Spira, CEO of Basex 
Inc., a New York-based con- 
sulting firm. “They have not 
yet been widely adopted sim- 
ply because they are not yet 
widely known.” 

Almost all of the vendors 
selling such tools are small, 
Radjou said. Bright Idea — 
which until recently was called 
General Ideas Inc. — is a 15- 
person firm, but it counts 
Bosch, Bristol-Myers Squibb 
Co., Honeywell International 
Inc. and Hallmark Cards Inc. 
among its clients. Boston- 
based Imaginatik and Carlsbad, 
Calif.-based Akiva Corp. sell 
similar software as well. 

Bright Idea already offers 
packaged software that starts 
at $65,000 for a server license 
and an additional $60,000 for 
integration and customization. 
The hosted service starts at a 
monthly fee of $49 per user, 
Greeley said. @ 54682 
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GLOBAL 


Hitachi Replacing PCs 
With Secure Thin Clients 


TOKYO 


ITACHI LTD., one of Japan’s 
ri biggest electronics companies, 

plans to replace thousands of 
employee PCs in that country with its 
thin-client devices because of data se- 
curity concerns, officials said at a news 
conference last week. 

Over the next two years, the compa- 
ny will roll out 16,000 thin clients in- 
ternally, IT chief Kazuo Furukawa said. 
“Security is becoming an extremely se- 
vere problem, and passwords are no 
longer enough,” he said. Instead of re- 
lying on passwords, Hitachi’s thin 
clients authenticate users via a plug-in 
Universal Serial Bus device that acts 
as a key. 

The move to diskless computers fol- 
lows a trial deployment of 2,000 thin 
clients that started in February. Even- 
tually, Hitachi may replace the desktop 
and notebook PCs of virtually all of its 
242,000 employees in Japan, according 
to Furukawa. 

Hitachi also plans to sell its thin- 
client desktops and notebooks — 
which use the Windows XP Embedded 


An International 
IT News Digest 


| Operating system and Intel Corp.’s 
Celeron processors — to other compa- 
nies in Japan, starting in the second 

| half of this year. 

m PAUL KALLENDER, IDG NEWS SERVICE 


Pantech Gives Mobile 
Phones a New Shape 


TOKYO 
OST CELL PHONES are shaped 
M like candy bars or clamshells. 
But South Korean vendor Pan- 
tech Co. plans to change that in June 
when it starts selling mobile phones 
that slide open — with a twist. 
Pantech said last 
week that its PT-S110 
and PT-K110 
phones have 2-in. 
portrait-format 
color screens that 
slide up to reveal 
their keypads. 

The displays can 
then be twisted 90 de- 
grees, converting them 

| to a landscape format 

Wi and giving the phones 
Pantech’s PT- a T-shape, the Seoul- 
K110 cell phone based company said. 





| 





The new phones include a music 
player, a 2-megapixel digital camera, an 
electronic dictionary, a text-to-speech 
function and an optical character 
recognition scanner. 

The phones will be sold only in 
South Korea for a retail price of about 
500,250 won ($500 U.S.), Pantech said. 
m PAUL KALLENDER, IDG NEWS SERVICE 


U.K. Retailer Moves to 
VoIP, Converged Network 
VER THE NEXT five and a half 

OQ: London-based retailer 
Marks and Spencer Group PLC 
plans to implement a voice-over-IP 
(VoIP) system at its U.K. stores and a 
converged voice/data IP WAN for all 
of its international operations, the 
company’s networking contractor 
disclosed earlier this month. 

Cable & Wireless PLC also an- 
nounced the extension of its network 
management contract with Marks and 
Spencer until the end of 2011. 

The London-based international 
network carrier explained that it plans 
to continue to manage the retailer’s 
existing voice and data networks while 
it works to move all of the communica- 
tions traffic onto a single IP network 
and deploy VoIP in the U.K. 

@ 54642 
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Briefly Noted 


France Telecom SA last week 
completed its buyout of Amster- 
dam-based network operator 
Equant NV. The price tag, including 
debt assumed by Paris-based 
France Telecom, was 1.26 billion 
euros ($1.58 billion U.S.). Equant 
provides data communications ser- 
vices to users in 220 countries and 


Swiss International Air Lines Ltd. 
in Basel this month announced the 
appointment of Frank Meyer, 34, as 
executive vice president and CIO, 
effective June 1. Meyer, previously 
head of systems planning at the air- 
line, succeeds retiring CIO Robert 
Borntrager. 


Network Healthcare Holdings Ltd. 
(Netcare), the largest for-profit 
health care operation in South 
Africa, will spend 100 million rand 
($15.3 million) over the next two 
years on an ERP system based on 
SAP AG's software, the vendor an- 
nounced last week. Johannesburg- 
based Netcare runs 62 hospitals, 
56 clinics and 80 pharmacies. 


Governments Plan Data Grid Projects 


BY PATRICK THIBODEAU 
Some governments and not- 
for-profit organizations such 
as hospitals are beginning to 
look at data grid technology as 
a means to improve services, 
lower operating costs and 
spur economic development. 
Separate data grid plans in- 
volving hospitals, schools and 
municipal agencies in Cleve- 
land and within Singapore’s 
government were announced 
this month. Such efforts will 
likely take years to reach 
fruition. But that doesn’t stop 
people like Vincent Miller, 
CIO at Cleveland-based 
MetroHealth System, from 
seeing their potential. 
“Wouldn't it be neat if we 
could tie ourselves together as 
part of a regional health orga- 
nization?” Miller said. “From 
a conceptual perspective, it 
makes a lot of sense.” 





IBM, under the new Eco- 
nomic Development Grid ini- 
tiative, has started working 
with a regional group called 
OneCleveland to develop data 
grids in that city. Miller said a 
plan for a grid connecting area 
hospitals is in the early discus- 
sion stages. 


How They Work 
A data grid is similar in con- 
cept to a compute grid. But 
instead of tapping CPU re- 
sources from different systems 
to improve computational effi- 
ciency, data grids use a mid- 
dleware layer and metadata 
framework to give connected 
end users a centralized view 
of information, no matter 
where it’s stored on a grid. 
Vendors such as Avaki 
Corp., which was acquired this 
month by Sybase Inc., offer 
technology for developing 


data grids. But thus far, most 
grids have been deployed in- 
ternally by businesses for 
pooling research or financial 
data. Creating a data grid that 
spans multiple organizations 
is relatively new, said Jonathan 
Eunice, an analyst at Illumina- 
ta Inc. in Nashua, N.H. 
Singapore has set up a CPU 
grid for developers of comput- 
er games aimed at the Asian 
market that they can use to 
test and deploy their products. 
Now the government is work- 
ing with the country’s con- 
struction industry and the Na- 
tional University of Singapore 
on a multiyear effort to devel- 
op a data grid. Sun Microsys- 
tems Inc. is among the ven- 
dors involved in the project. 
Khoong Hock Yun, assistant 
CEO at the Infocomm Devel- 
opment Authority in Singa- 
pore, said last week that the 


plan calls for a grid that allows 
government agencies, con- 
struction firms, suppliers and 
specialty contractors to ex- 
change data and files. 

Yun said the government 
wants to help construction 
firms become more efficient 
and reduce building costs. 

The overarching goal is to help 
make Singapore a more attrac- 


Cla] Ideas 


IBM and OneCleveland have 
in mind, in addition to a pro- 
posed health care project: 

= AK-12 schools outreach 
grid would coordinate the shar- 
ing of information among local 
schools and universities, 

@ A higher-education collab- 
orative grid would support broad 
data sharing among colleges. 


@ A public information grid 
would link municipal agencies. 


tive business location to multi- 
national companies, he added. 

Enabling the data sharing 
requires overcoming technical 
hurdles, such as developing 
security capabilities, inter- 
faces between systems and 
rules that ensure regulatory 
compliance. But those in- 
volved say the bigger chal- 
lenge is organizational. 

“Many of the companies by 
nature don’t want to collabo- 
rate,” Yun said. He added that 
he has succeeded in getting a 
core group of private-sector 
firms to participate in the 
project. But doing so hasn’t 
been easy, Yun acknowledged. 

Scot Rourke, president of 
OneCleveland, which operates 
a broadband networking ser- 
vice for nonprofits and univer- 
sities, also sees organizational 
issues as critical. “It’s less of a 
technology challenge than it is 
coordinating the various needs 
and interests of the partici- 
pants,” he said. @ 54680 





WE MAKE IT 


CASE STUDY: = 
Taking Ownership of the Future 


When Calderon Textiles’ new VP of Operations, Mike Elkin, needed 

a complete understanding of its data infrastructure connecting distributors 
and suppliers around the world, he turned to insight for a Business Continuity 
Assessment. Insight’s security, infrastructure and disaster recovery experts 
performed a top-to-bottom evaluation of the logical and physical 
environments and provided a complete report that prioritized the 

risks, issues and resolutions. With this information, Calderon 

can gain greater control of the environment and ensure 


continued, uninterrupted business 
Ki 


eae Tami c it 
ak See ee erege ges 
etaee p & % 


aaa 2. ce 


\ 


operations now and far into the future. 


www.insight.com/CW VY 800.998.8052 


Source Code: ADO2! 

Insight and the Insight logo are registered trademarks of insight Direct USA, inc. IT For The Way You Work is a trademark of insight Direct USA, Inc. All other trademarks, 
registered trademarks, photos, logos ond illustrations are property of their respective owners. 

©2005 Insight Direct USA, Inc. All rights reserved. 


FOR DISASTER 
RECOVERY 


The unfortunate fact is disasters happen. 
But ultimately, it's how fast your business 
can recover that really counts. Providing 
the leading technologies and services 
like our Business Continuity and Disaster 


- Recovery assessments, Insight can help 
you gain greater understanding and control 


of your data, your IT environment and 
your business. Find out how Insight can 


"provide everything you need to keep IT 


StorageWorks DAT 72 Hot-Plug Tape Drive 
Starting at $1,450.60 aiszx 


IT For The Way You Work” 





16 


COMPUTERWORLD May 30, 2005 


NEWS 


Blogging Software Aids 
Package-Iracking Project 


Tools coordinate | 
development in 
different countries 


BY THOMAS HOFFMAN 
HEN eCourier 
Ltd. developed 
an innovative 
online package- 
tracking system for its cus- 
tomers last summer, it had to 
coordinate work among front- 
and back-end developers in 
Italy, Germany and the U.K. 

But instead of using tradi- 
tional project management 
software to monitor the proj- 
ect, the developers used 
weblogging tools from Provi- 
dence, R.I.-based Traction 
Software Inc. to generate proj- 
ect updates and provide a 
record of the work. 

A small but growing number 
of IT organizations are begin- 
ning to use blogging tools for 
those same purposes, say in- 
dustry experts. “They’re really 
starting to pick up in populari- 
ty” among project teams, said 
Jack Duggal, a principal at Pro- 
jectize Group, a Simsbury, 
Conn.-based project manage- 
ment consulting firm. 

The eCourier package- 
tracking system, supported by 
Global Positioning System 
software contained in each 
courier’s handheld device, 
went live last October. It al- 
lows customers like Paul 
Smith, a U.K.-based clothier, 
to log onto eCourier’s Web 
site to see where a courier 
picked up a package, where it’s 
being dropped off and where 
the package is at any time. 

For eCourier, a London- 
based express courier compa- 
ny, using blogging tools to help 
develop the Java-based map- 
ping system made sense for 

| 





several reasons, said Jay Breg- 
man, eCourier’s co-founder 
and technology director. “I 
wanted to cut costs as much as 
possible, so I couldn't afford to 
be traveling from Italy to Ger- 
many to the U.K.” to manage 


the project teams, he said. 

At a cost of roughly $1,000 
for a five-person license, the 
blogging tools from Traction 
Software more than paid for 
themselves in travel savings 
alone, said Bregman. “And 
instead of playing a massive 
game of telephone 
[tag] between [devel- 
opers], this gave us a 
source of record,” he 
said. 

Users of Traction 
Software’s blogging 
tools can scroll 
through a list of proj- 
ects and determine 
who posted an update 
to a project and when, 
said Jordan Frank, the ven- 
dor’s vice president of mar- 
keting and business de- 
velopment. Project activities 
can be prioritized, and project 
managers can see when each 
phase has been completed. 

The software can also be 
used like wikis, which allow 


teen Br) 
fete Ce Tem Lely 
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all of the information to be 
edited by users who have per- 
mission to do so, said Frank. 
Unlike blogs, wikis allow visi- 
tors to edit a Web page in ad- 
dition to making their own 
postings. 

Although Bregman raved 
about the low cost and 
benefits of using blog- 
ging software, one 
consultant questioned 
why teams wouldn't 
simply use free 
blogging software. 

“Why not do it for 
free with open-source 
software and get the 
same benefits of hav- 
ing a forum for discus- 
sion?” said David L. Ross, a 
project management consul- 
tant at David L. Ross and As- 
sociates in New York. 

Duggal sees it differently. “If 
the software only cost them 
$1,000, it’s well worth the func- 
tionality” and support options, 


he said. @ 54663 
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Continued from page 1 
Blogs 


who heads IT at Palo Alto, 
Calif.-based law firm Tomlin- 
son Zisko LLP. Scoble said last 
week that he blogs mostly 
about technical issues, seeking 
product recommendations 
from other users and even 
writing about customer sup- 
port snafus. 

The blog, which he started 
about 18 months ago, has 
served as a good way 
to record his work and 
solicit advice, Scoble 
said. There’s also 
some personal satis- 
faction involved. “If I 
can help a couple of 
people with experi- 
ences that I’ve had, 
that’s great,” he said. 

And Scoble sees 
professional benefits 
to writing a blog as 
well. It puts his IT 





aes) 
one roadblock 
to IT managers 
blogging is 
that they don’t 
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| knowledge and experience 


“out there,” he noted. “It tells 
prospective employers what 
you know.” 

Scoble may be more com- 
fortable with blogging than 
are most IT managers partly 
because of the efforts of his 
well-known blogging brother, 
Robert Scoble, who is an em- 
ployee at Microsoft Corp. 

Robert Scoble writes a blog 
called “Scobleizer: Microsoft 
Geek Blogger” that’s ranked 
No. 31 on the list of the 100 
most-linked blogs 
compiled by Techno- 
rati Inc.’s blog-tracking 
search engine. 

Christopher Sloop, 
chief technology offi- 
cer at AWS Conver- 
gence Technologies 
Inc. in Gaithersburg, 
Md., participates in a 
public group blog at 
his company, which 
develops the widely 
used WeatherBug soft- 





ware. Sloop said he thinks it’s 
important to communicate 
about the software and discuss 
technical issues with users. 
But he added that it’s diffi- 
cult to find the time to work 
on the blog. That may also be 
an issue for other IT man- 
agers, Sloop said. Blogging by 
users “may occur more on a 
customer support level or a 
programmer level,” he said. 
Among major vendors, IBM 
this month detailed a policy 
that encourages its 320,000 
employees to blog. IBM isn’t 
prohibiting workers from blog- 
ging about the company but 
said they should include their 
names and, when relevant, 
roles at IBM. The company also 
said bloggers need to follow its 
conduct code, not reveal sen- 
sitive issues and not cite cus- 
tomers without their approval. 
Sun is hosting more than 
1,000 employee blogs that are 
public and said it lets workers 
discuss any topic in them. Mi- 


crosoft has some 1,500 blogs, 
many on technical issues re- 
lated to its products. IBM cur- 
rently hosts about 30 blogs 
written by employees, and 
Hewlett-Packard Co. said it’s 
also hosting a relatively small 
number at this point. 

David Gee, vice president of 
marketing for the manage- 
ment software business at HP, 
said he believes blogging will 
take root at user companies as 
they hire younger IT workers 
who blogged regularly in col- 
lege. “It will be pushed by that 
generation doing what they do 
at home and wanting to have it 
in the office,” he said. “We’ve 
seen history of that in the in- 
dustry time and time again.” 


@ 54685 
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Keys to Successful Business Intelligence Deployment By Dan Vesset 


he evolution of information technology (IT) is continually 

producing new tools for productivity enhancement. Business intel- 
ligence (BI) tools and applications, for instance, have undergone 
several generations of improvements, but research into the BI mar- 
ket suggests that considerable productivity can still be tapped by 
implementing currentiy available BI software. The business need 
for such tools is more pressing than ever, and so is the challenge to 
IT departments to get BI implementations right. > 
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The Pillars of Decision- 
Process Automation 


has shown that 
organizations derive two primary 
benefits from BI projects: produc- 
tivity gains and business process 
enhancements. These two pri- 
mary benefits can be achieved by 
selecting BI tools that address the 
following four major variables in 
decision making, which in turn 
can lead to sustained competi- 
tive advantage: 


Speed 
Insight 


Accuracy 
Relevance 


Speed and accuracy of 
decision making are the 
primary contributors to 
increased productivity. On the 
other hand, advanced predictive 
and descriptive analytics, as man- 
ifested in the insight and rele- 
vance of decision making, con- 
tribute actively to business 
process enhancements. 

Competitive advantage comes 
from the speed and accuracy of 
decision making, as well as from 
assessing the relevance of infor- 
mation to a decision and from 
gaining insight in seeking and 
evaluating possible decision 
alternatives. Because many types 
of decisions are recurring or 
repeatable (such as pricing, 
extending credit or allocating 
resources), decision-making 
processes exist that are amenable 
to automation. 

However, decision process 
automation is achievable only 
when all four variables outlined 
above are used in software 
architectures that support 
decision making. 


PUBLICATIONS 


IDC defines business intelligence software as the soft- 
ware that supports speed, accuracy, relevance and 
insight in decision making. BI, in turn, is a segment of 
the broader business analytics market that includes 
tools for data integration, data warehouse manage- 
ment, query and reporting, data mining, technical 
data analysis, and spatial information management 
as well as prepackaged applications for customer 
relationship management (CRM); financial, business 
performance management; supply chain; and 
operational analytics. 


The need for these software solu- 
tions has never been greater. For 
instance, data published last year 
by the U.S. Department of Labor 
has shown a slowdown in produc- 

tivity, which suggests that perhaps 

the low-hanging fruit of the excesses 
of the late 1990s has been picked, and 
therefore businesses need to find new ways to 
increase productivity if they hope to gain competitive 


advantage. 


A new investment cycle in productivity-enhancing tools 
appears imminent, and current investment trends in BI 
software support this conclusion. In 2004, the BI tools 
market experienced better-than-expected performance, 
growing by 9.5% to reach $4.25 billion in worldwide 
software revenue. IDC forecasts a 2004-2009 com- 
pound annual growth rate (CAGR) of 6.0%, which 
reflects some changes in the underlying market, such 
as a shift in software sales from BI tools to packaged 
analytic applications and database-embedded BI com- 
ponents. IDC estimates that the broader business 
analytics market reached $14.5 billion in 2004. 


Critical Misal 


rl ignment 


Despite a healthy adoption rate, however, the deploy- 


ment of software to support decision-making process- 
es continues to lag significantly behind the money that 
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companies spend on software to process 
transactions. IDC research shows that for 
every dollar spent on transaction processing 
applications or capturing and getting data 
into databases, only $0.25 is spent on get- 
ting the data out for business analytics to 
support decision-making and statutory 
reporting processes. 


The result is a critical misalignment between 
business needs and the information technol- 
ogy intended to serve those needs. For 
example, a recent IDC survey revealed that 
only about 10% of business managers feel 
very confident with the statement that the 
reports developed in their organizations 
deliver relevant information to the right 
people at the right time. About 40% of the 
managers surveyed reported feeling not at 
all confident or only somewhat confident. 


Although the misalignment between IT and 
business is ultimately a business problem, 
IT managers must address several distinct 
IT challenges to successfully implement 
and support BI: 


> Defining system requirements. BI imple- 
mentation is often a vague and iterative 
process because of the difficulty in deter- 


ONS 


mining in advance all the information 
forms that users want—the type of reports 
or the alerts for certain kinds of informa- 
tion. Usually the BI system is replacing a 
relatively manual data-tracking process 
that may employ an Excel spreadsheet, for 
example. So after the new BI system is 
online, users begin asking for more—more 
data sources, more different kinds of 
reports, more key performance indicators 
(KPIs). Each of these requests needs to go 
through the IT department, and while some 
are relatively easy to implement, others 
take more time and testing. Unlike other IT 
systems, such as financial applications that 
remain comparatively static following 
implementation, BI systems are dynamic 
and continually evolving. 


> Transforming disparate data into a sin- 
gle model. All the information that popu- 
lates user “dashboards” and “scorecards”— 
the BI interfaces—must be brought in from 
different systems and molded into a single 
data model. This is a complex data transfor- 
mation task. For example, IDC has found 
that in BI projects for CRM systems, 70% of 
the work is just around sourcing and map- 
ping the data—before the information can be 
accessed and distributed. A related issue is 


Challenge of Maintaining Business Intelligence Data Quality 


Using a 5-point scale, where 5 is “very 
difficult” and 1 is “not at all difficult,” 
please rate the difficulty of maintaining 
business intelligence data quality. 

n=40 


Source: IDC, 2005 


1 
(not at all 
difficult) 
[12.5%] 


4 
[20.0%] 
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maintaining data quality, which according to a recent 
IDC survey, is an ongoing challenge. A full 35% of sur- 
vey respondents said that data quality maintenance is 
either “very difficult” or “difficult,” versus only 12.5% 
who answered “not at all difficult” (see chart, page 3). 


> Managing user expectation/experience. Users 
often expect to get a lot of data immediately and to 
have the system solve tough business problems. As 
described earlier, BI system development is inherently 
iterative, complex, and ongoing. Furthermore, while 
BI is being extended to address decision-making 
processes, the types of decisions for which the tech- 
nology is best suited tend to be operational decisions 
that are foreseeable and repeatable—decisions that 
employees have to make on a regular basis. BI will not 
necessarily hand users their next big idea, such as the 
creation of a new product. Moreover, although 70% of 
respondents to a recent IDC survey said that existing 
BI systems let them effectively make operational deci- 
sions, 30% of organizations still have systems that 
don’t allow for effective operational decisions. 


> Guaranteeing system availability. BI is not just for 
executives anymore. Increasing numbers of line-of- 
business managers and lower-level employees are 
accessing BI systems to make important decisions as 
part of their normal duties. BI usage is, in effect, 
reflecting a larger business trend toward decentraliza- 
tion, the flattening of organizational hierarchies, and 
increased decision-making responsibility for front- 
line workers. As BI follows this trend, it becomes more 
operational, and while BI isn’t yet on a par with trans- 
action processing systems, it’s clearly getting there. 
Downtime on transaction processing systems is intol- 
erable, and it’s increasingly less tolerated on BI sys- 
tems. This indicates that BI has become truly integrat- 


ed in the business processes of many companies. IT 


managers can expect this trend to grow with the 
advent of real-time information delivery; as BI infor- 
mation becomes more time-sensitive, system down- 
time becomes a bigger problem. @ 





Are YOU 
een PAID 


COMPUTERWORLD 


SALARY 





18 couputerworio say 30, 2005 


OPINION 


DON TENNANT 


Device-driven 


T A SEMINAR LAST WEEK in San 

Francisco on the impact of mobility on 

business, I asked for a show of hands 

to see how many of the attendees’ 

companies have a policy governing the 
use of personal devices. Of the roughly 50 people in 
the audience, four raised their hands. 


No one in the room, 
including me, was sur- 
prised. The lack of such 
policies in corporations 
is well documented. But 
what did surprise me was 
the depth and universali- 
ty of frustration that IT 
pros are feeling with re- 
spect to trying to manage 
mobile devices. 

One CIO talked about 
how he’s bummed that 
vendors haven’t done a 
better job of standardizing cell 
phone and handheld wares; another 
wondered how to devise a sustain- 
able support model. And then there’s 
the issue they’re all fretting over, 
probably more than any other: secu- 
rity. Between lost data and the pro- 
liferation of spam and viruses target- 
ing these devices, the threat seems 
to be overwhelming many CIOs. 

The hand-wringing over security 
is only going to get worse, because 
personal devices are only going to 
get more ubiquitous. And as if cell 
phones and handhelds weren't 
enough to contend with, MP3 play- 
ers are quickly being added to the 
cache of productivity arms in your 
users’ arsenals. 

That disquieting fact was under- 
scored last week when Apple Com- 
puter’s Steve Jobs said his company 
will support and organize podcasts 
— downloadable audio files, typical- 
ly of voice programming — in the 
next versions of its iTunes and iPod 
software. The announcement didn’t 
raise too many security alarms, but 
think about it. Podcasting is a conve- 
nient, inexpensive, reliable means of 





disseminating informa- 
tion to a global work- 
force. It’s already gain- 
ing popularity as a vehi- 
cle for sharing the pro- 
ceedings of meetings 
and conferences, and it’s 
easy to imagine how it 
might be used for corpo- 
rate training and vertical 
applications like distrib- 
uting lecture materials 
in the education sector. 
What that means is 
that MP3 players will eventually be 
standard equipment for your users. 
And when that time comes, the ca- 
pacity for corporate data loss will be 
almost incomprehensible. Your net- 
works and devices might be bullet- 
proof, but there will be nothing to 
mitigate the insider security threat 
when your organization is inundat- 


| ed with what are essentially port- 
able hard drives with exponentially 
growing storage capacities. 
| Fortunately, for many organiza- 
| tions there will be a silver lining in 
all this, because they'll no longer 
have to deal with the headache of 
supporting a PC on every desktop. 
Concern about the damage these de- 
| vices can do will be the catalyst that 
| finally makes server-based, thin- 
client computing compelling 
enough for many CIOs to bite the 
bullet and make the switch. 

Just last week, Hitachi cited secu- 
rity as the main reason for a plan to 
replace 16,000 internal PCs with 
thin clients over the next two years 
[QuickLink a5890]. True, Hitachi is 
in the business of selling thin-client 
systems, and its move is similar to 
what Sun Microsystems has done 
with the internal adoption of its Sun 
Ray thin clients. 

There’s unquestionably a market- 
ing element involved, but it would 
be shortsighted to chalk the strate- 
gies up to gimmickry. These guys 
are on to something. @ 54651 





www jklossner.con 





www.computerworld.com 


MICHAEL GARTENBERG 


There's a 
Scarcity of 
Great Stuff 


HERE HAS all the 
good stuff gone? 
When Jef Raskin 
passed away not too long ago, 
I started wondering about this. As a 
longtime champion of simpler comput- 
ing interfaces, Raskin was behind the 
original concept of the Macintosh, be- 
fore Steve Jobs took over the project. 
His focus was on simplicity and easier 
interaction between man and machine. 
Over the years, other great designers 
have created some truly innovative ap- 
plications and helped drive productivi- 
ty forward. Sadly, many of these tech- 
nologies have fallen by the wayside, 
and along with them, a lot of great fea- 
tures in human/computer interaction 
have been lost. Here 
are some of the 
things I miss and 
some of the features 
that made them not 
only indispensable 
but also classics that 
have no peers among 
today’s personal pro- 
ductivity tools. It’s 
time to look back to 
drive things forward. 
Remember Agen- 
da from Lotus? This 
personal information 
manager offered a 
dazzling array of 
flexible features and 
views and could un- 
derstand natural 
commands such as 
“Meet with Joe next a , 
Thursday at 1.” Rese 
Lotus also created Improv, a next- 
generation spreadsheet. Introduced as 
a showcase piece of software for the 
NeXT platform (and later ported to 
Windows), it was as different from 
anything that had come before it as 
spreadsheets were from paper ledgers. 
The program was object-driven, and it 
was easy even for novices to create and 
restructure data on the fly. Microsoft's 
answer was to incorporate pivot tables 
into Excel, but it was hardly the same 
thing. Now the spreadsheet languishes, 
and Excel has hardly changed in years. 
Other productivity greats? Page- 
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Maker let anyone do professional paste- 
up work without intensive knowledge of 
graphic arts. The simple metaphor for 
layout had no equal. Today’s programs 
are all either too simplistic in function- 
ality or too arcane for mere mortals. 

It wasn’t just applications. Operating 
systems were moving forward at one 
point before stagnation set in. When 
Apple introduced the Newton technol- 
ogy, it seemed revolutionary. There 
was no file system, and all complexity 
was hidden from the user. The default 
state for all information was to be 
saved permanently. I recently dug out 
an old Newton from 1996 or so and 
popped in a set of AA batteries, and, 
announced by a little trill, there were 
all my applications and data, ready and 
waiting for me. Try that with an old 
handheld and see what happens. 

Hardware has also taken a step back- 
ward. The HP 100lx, for example, was 
a nearly perfect mobile computing de- 
vice. It had a usable mobile keyboard 
and a real embedded numeric keypad, 
so taking down phone numbers from 
voice mail was a snap. It ran forever on 
two AA batteries and even had a PC 
Card slot. If I could get mine to do 
wireless e-mail and sync with Outlook, 
I'd go back to it in a heartbeat. 

It’s time for some innovation. I’m 
tired of mediocrity and complexity in 
the hardware and software I use. I’m 
tired of Linux distributions masquer- 
ading as innovation by trying to mimic 
Windows and Office (with all of their 
flaws, I might add). How about bring- 
ing back some of the older concepts, 
updated for the 21st century? I’m wait- 
ing with my credit card at the ready, 
and I suspect others are, too. 

What classic programs and features 
do you miss? Drop me a line and let me 
know. @ 54487 


JOHN D. HALAMKA 


Health Care 
Needs a DNS 
For Patients 


PATIENT WITH an al- 

lergy to aspirin has a 

heart attack while dri- 
ving, loses consciousness and 
crashes into a telephone pole. In the 
emergency department, the first med- 
ication likely to be given to him is ther- 
apy for the heart attack — aspirin. 
Adding an allergic reaction to the ex- 


OPINION 


isting heart attack and trau- 
ma results in shock, and the 
patient dies. 

If there were a national 


| health care information net- 


work, medical errors result- 
ing from lack of data shar- 
ing would be drastically re- 
duced. Unfortunately, there 
are many barriers to the se- 
cure exchange of electronic 
medical records, the most 
basic of which is the lack of 
a consistent way to identify 
each patient. 

For privacy reasons, it’s 
unlikely that we in the U.S. 
will have a national health 
identifier in the next decade. 
Recent privacy spills at 
ChoicePoint, DSW and 
Ameritrade highlight the 
risks of maintaining a nation- 
al health identifier that could 
be used with other identifiers, such as 
Social Security numbers, to link med- 
ical, banking and employment records. 

A better way to interconnect health 
care is to leave all the data, without a 
national identifier, where it lives today 
in doctors’ offices, hospitals, labs and 
pharmacies, but connect it with the 
kind of decentralized, federated but 
coordinated architecture that drives 
the Web. When you want to buy a book 
from Amazon.com, it’s unlikely that you 
type the IP address, http://207171.175.29. 


Proper Development Requires Feedback 





Instead, you type www. 
amazon.com, and the Inter- 
net’s Domain Name System 
connects you to the right 
Web server. 

Imagine a DNS for pa- 
tients that functions in a 
similar way. When a pa- 
tient consented for his 
identity to be recorded, his 
name, sex, date of birth, 
ZIP code and medical 
record number (but not 
clinical information) would 
be securely transmitted to 
a medical-grade patient 
DNS. A clinician needing 
access to medical records 
could, with the patient’s 
consent, query the DNS by 
providing demographic in- 
formation and then obtain 
a list of the institutions the 
patient had visited as well 

as his medical record numbers. He 
wouldn’t have to know the numbers — 


| the rough equivalent of Amazon’s IP 


address — ahead of time. 

In the short term, this patient DNS 
would provide the clinician with 
enough information to contact other in- 
stitutions that have treated the patient 
and request medical records via fax or 
phone. Over the next few years, as hos- 
pitals set data-exchange standards and 
clinician offices implement interopera- 
ble electronic health records, this pa- 
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| tient DNS would provide a framework 

| for linking electronic health data. 

| Groups in Massachusetts, Indiana 
and California are piloting a patient 
DNS this summer as part of a common 
framework to exchange medical 
records, with funding from the Markle 
Foundation’s Connecting for Health 
Project (http://connectingforhealth.org) 
and the Robert Wood Johnson Founda- 
tion. The technical architecture is built 
upon Web services, secure gateways 
and the WS-Security standard. The pi- 
lot implementation is called the 
Record Locator Service. 

The privacy and security policies 
that protect patient confidentiality, en- 
sure consent and provide auditing of 
the lookup process are much more 
challenging than the technology itself. 
This summer’s pilot will engage pa- 
tients, privacy experts, attorneys, clini- 
| cians, employers and payers to develop 
these policies and oversee the project. 

With a secure patient DNS, we can 
| interconnect health care in this coun- 
try, saving lives, reducing costs and 
| bringing health care to the same level 
of interoperability that has revolution- 
ized industries such as financial ser- 
vices, airlines and manufacturing. 


@ 54480 


WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site: 
www.computerworld.com/columns 
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A paper trail is necessary, and 2) 


We are happy IBM BladeCenter 





ICHAEL H. HUGOS left out 

feedback in the approach he 
described in his column “Just a 
Handful of Techniques” [QuickLink 
53699]. Without it, one doesn't 
know whether the final product was 
what was desired. 

After the product is completed, 
users need to be trained on it, and 
then they should play with it for a 
while to see what they like, what 
they use, what they thought was 
going to be delivered but wasn't, 
how to do some extra things that 
they didn’t expect and anything else 
that comes from actual hands-on 
experience. 

Afterwards, they need to be 
asked for their critiques of the prod- 
uct: Was it what they expected 
(both good and bad things)? Does 
it work as advertised (again, for bet- 
ter or worse)? What would they 
change if they could? These re- 


sponses should then be shown to 

| the design team, which can possibly 
| get some ideas for improvements. 

| James A. Olson 

Senior researcher, Homeland 
Security Institute, Arlington, Va., 
james.olson@hsi.dhs.gov 


| Stick With Paper 
Ballots for Backup 


N THE STORY “E-voting May 

Face Recall in Florida County” 
[QuickLink 53813], Miami-Dade 
County Mayor Carlos Alvarez is 
quoted as saying that “people want 
some sort of backup, a hard copy 
on paper,” which is unavailable with 
touch-screen machines. 

It would appear that Alvarez has 
arrived at the same conclusion that 
| reached when electronic voting 
was just being widely discussed: 1) 








the best way to do this is to mark 
paper ballots and scan them opti- 
cally. The resulting paper trail then 
can always be recounted until the 
paper itself disintegrates. 

And of course, while it is possi- 
ble to miscount even with optical 
scanning, the original vote remains 
intact and unaffected by coding 
errors. 

Charles J. Lingo 
Denham Springs, La. 


Blades Work Fine 


HE SEEDS OF DOUBT about 

blade center technology were 
most probably planted by those in 
the industry who don't have viable 
solutions [“Edgy About Blades,” 
QuickLink 53851]. | recall some re- 
marks by Michael Dell a year or so 
ago that warned about heat buildup. 
My guess is that at that time, Dell 


| hadn't figured it out yet. 





users with almost a full rack. We run 
Novell, Windows and Linux via 
VMware on the blades and Fibre 
Channel them to a Shark and an 
IBM LTO. We have neverhad a 
problem with the blades or with the 
technology involved in the product 


design 


Wally Knapp 


Baltimore 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to 
Jamie Eckle, letters editor, Com- 
puterworld, PO Box 9171, 1 Speen 
Street, Framingham, Mass. 01701. 
Fax: (508) 879-4843. E-mail: 
letters@computerworld.com. 
Include an address and phone 
number for immediate verification. 


For more letters on these and 
other topics, go to 
www.computerworid. 
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Dont Miss 
Your Chance! 


COMPUTERWORLD 


Nominate an outstanding IT 
leader for Computerworld’s 
Premier 100 IT Leaders 
IT LEADERS 2006 © 2006Awards program 


EACH YEAR, Computerworld editors conduct a nationwide search for 

IT managers and executives who show technology leadership in their ® P 
organizations. This prestigious awards program recognizes and honors Who Qual Ais > 
IT professionals from a wide range of industries, drawing attention to the 


innovative, business-critical 
work they do. 


ELIGIBLE NOMINEES include 

CIOs, CTOs, vice presidents, 

IT directors and managers 

from user companies, nonprof- © 
its, the computer industry and 

the public sector. 


HONOREES will be announced 
in Computerworld’s Dec. 12, 
2005, issue and will be our 
guests at the 7th Annual 
Premier 100 IT Leaders 
Conference, March 5-7, 

2006, in Palm Desert, Calif. 


Deadline for Nominations Is May 31 


Go online to nominate an IT leader at computerworld.com/p100nominations or 9 QuickLink a3420. 
Questions? Contact us by e-mail at premier100@computerworld.com. 
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All Together Now 

Systems integrators spend their 
professional lives making tech- 
nologies interoperate. Here are 
the steps they say are key to plan- 
ning and executing successful 
integration projects. Page 26 


QUICKSTUDY 
Supercomputers 
When is a computer 
a supercomputer? In 
the end, it’s all about 
performance. 


Page 30 





Driven by million-dollar 
fines, businesses are 
using technologyto 
comply with legal and 
regulatory requirements 
- and regain control 


over electronic records. 
By Robert L Mitchell 


FEW YEARS AGO, most com- 
panies didn’t give much 
thought to electronic rec- 
ords management. But a 
spate of scandals, lawsuits 
and new regulations has 
changed all that. 
Despite renewed atten- 
tion to e-records manage- 
ment, however, many organizations 
still lack automated systems to effi- 
ciently process all e-records requested 
during a legal discovery proceeding. 
Yet retrieving such records — and the 
penalties for noncompliance — can 
cost businesses millions of dollars. 

“E-litigation is an extremely expen- 
sive endeavor,” says Jane Connerton, 
corporate records manager at The 
Procter & Gamble Co. in Cincinnati. 
While P&G has a records retention 
policy, finding and retrieving records 
during legal discovery can be a daunt- 
ing challenge — especially when the 
records are on backup tapes. 

“We had a case that, after a week’s 
worth of discovery, we calculated that 
backup tape suspension and legal re- 
view of the e-records was going to cost 
us a million dollars,” Connerton says. 
And, she adds, such requests aren’t un- 
common for businesses of P&G’s size. 

In response, companies are turning 
to records and content management 
systems to automate the processes for 
identifying and categorizing records of 


| 





all types, establishing and en- 
forcing retention schedules, 


| and maintaining accessibility 


to those records. 

“You're trying to identify 
what has become a record, 
associate a rule with it and 


| blow it away when it’s no longer 
| needed,” says Julie Gable, prin- 
| cipal of Gable Consulting in 


Philadelphia. 

Companies must also comply 
with myriad local and federal 
regulations that vary by industry. 
For example, SEC Rule 17 requires 
that brokerages store records in a non- 
rewritable, nonerasable format. Sar- 
banes-Oxley Act Section 802 requires 
some records to be held for seven years. 
Other requirements are triggered by 
events, such as health care regulations 
that require records to be kept for a 
certain period after a patient’s death. 


The Elusive E-record 

Records serve as evidence, says 

Gable. “They accrue to business 

processes, show what transpired 

during transactions, confirm 

rights and obligations, and provide mo- 

tive for corporate action.” What consti- 

tutes a record is determined by busi- 

ness, regulatory and legal requirements. 

Those definitions and policies are typi- 

cally set by a corporate records manag- 

er, but IT must manage those records. 
Today, records 

take many forms. 

While printed 

documents may be col- 

lected in file cabinets, 

e-records are scattered 

across a wide range of 

repositories. They may 

be embedded in e-mail, 

instant messages and 


| other unstructured 


data that account for up 
to 40% of business data 
flows, according to the 
Storage Networking 
Industry Associa- 

tion (SNIA). 
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SECURITY MANAGER’ s JOURNAL 

More Than a Token Overhaul of the VPN 

Getting approval to deploy two-factor authentication was 
only half the battle. Now Mathias Thurman must redeploy 
the VPN infrastructure to make it work. Page 32 
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“E-mail is the biggest issue we see,” 
says Barclay T. Blair, director of the IT 
compliance practice at Kahn Consult- 
ing Inc. in Highland Park, Il. 

In 2004, for example, Banc of Ameri- 
ca Securities LLC was fined $10 million 
and Philip Morris USA Inc. and Altria 
Group Inc. $2.75 million for failing to 
produce e-mail records in a reasonable 
time frame and failing to preserve doc- 
uments after being told to do so. But 
despite such penalties, 65% of organi- 
zations still don’t have an e-records 
policy for legal hold orders, let alone 
the technology to enforce it, according 
to a survey by the Association of 
Records Managers and Administrators 
(ARMA) and the Association of Infor- 
mation and Image Management. 

The typical IT strategy of saving 


OlX TIPS 
FOR HANDLING 
E-RECORDS 


Jane Connerton, corporate records 
manager at Proctor & Gamble, re- 
cently oversaw the establishment of 
e-records guidelines and is working 
with IT to implement them across all 
data repositories. She offers these 
six tips for IT organizations: 


= Know the record contents of 
data, and manage the life cycle 
accordingly, as opposed to manag- 
ing it based on volume or location 
(for example, 60GB on Unix 


will be retrieved and used by 
primary users, and design the sys- 
tem to meet those specifications. 


® Work with your legal or regula- 
tory experts and know what laws or 
regulations apply to the records in 
your system. 


maintain all the metadata, too, in 
order to adequately define the context 


= Don’t keep backup data any 
longer than necessary to meet 
operational needs, and never 
longer than the record itself. 


= When erasing a record, simply 
deleting the file isn’t good 
enough. Use a process or technol- 
ogy that completely obliterates the 
data so it can’t be retrieved later. 








| everything doesn’t help, says Larry 


Medina, a records management con- 
tractor in Danville, Calif. “All non- 
record material should be destroyed as 
soon as is practical,” he says. “If you 
have things you didn’t need to retain, 
they become ticking time bombs in 


| your system.” Those documents could 


be used to the detriment of the compa- 
ny in legal proceedings, he says. 

But more important, they add to the 
cost of discovery, says Deidre Paknad, 
president of record information man- 
agement (RIM) software vendor PSS 
Systems Inc. in Palo Alto, Calif. “If 
there’s a legal hold, all the information 
you have, whether a business record or 
not, is discoverable,” she says. 

Once a policy is in place for deleting 
end-of-life records, halting those proc- 
esses in response to a legal hold order is 
difficult. Many organizations lack ade- 
quate technology and processes to deal 
with the problem, Gable notes. 

IT needs to work closely with 
records managers, says ARMA Presi- 
dent Dave McDermott. As assistant 
records manager at agribusiness con- 
glomerate J.R. Simplot Co. in Boise, 
Idaho, McDermott worked with his IT 
group to develop a retention require- 
ment for all backups. 

Because records may be needed in 
the future, eliminating or archiving 
based on activity level or disk space 
usage doesn’t work, says Michael 
Peterson, program director of the 
SNIA Data Management Forum. 

At a minimum, good records man- 
agement practices require interaction 
among IT, the corporate records man- 
ager, the business units that own the 
data and the legal department. Today, 
part of the problem is ignorance of 
records requirements within some IT 
organizations, says P&G’s Connerton. 


Evolving Tools 


RIM software helps to define and cate- 
gorize records and set retention poli- 
cies. But the programs, originally cre- 
ated to manage paper records, are still 
evolving to handle e-records in places 
ranging from the ERP system to e-mail. 
To deal with this challenge, most prod- 
ucts copy files and related metadata 
into a central repository. Records man- 
agement tools also integrate with desk- 
top productivity software, e-mail pro- 
grams and archiving software to iden- 
tify records and establish an audit trail 
for compliance purposes. 

RIM has caught the attention of en- 
terprise content management (ECM) 
software vendors such as EMC Corp.’s 
Documentum Inc. unit. They have 
snapped up RIM products and inte- 
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Here are a few examples of organizations that have paid 
a price for inadequate records management. 


grated them into their own suites. 

But Connerton says centralization is 
no panacea. “In a major corporation, 
you’re never going to have a single 
repository for all records,” she says. 
While P&G’s seven divisions do use 
RIM and ECM tools for some records, 
that’s not enough. “What we’ve done 
is mapped out where the records are, 
who owns them from an IT perspec- 
tive and how we can get them to facili- 
tate the discovery process,” she says. 

At FirstEnergy Corp. in Akron, Ohio, 
one-third of the company’s records are 
in its ERP system and can’t be easily 
copied into a central repository. Senior 
IT systems analyst Teresa Straight says 
she’s trying to figure out how to con- 
nect a FileNet system with SAP in or- 
der to manage records in the compa- 
ny’s data warehouses. 

Most RIM products still rely on man- 
ual processes or prompt the end user 
to identify, classify and check in 
records. Products such as FileNet 
Corp.’s Records Manager are at the 
forefront of a trend to automate that. 
With e-mail volume exploding, auto- 
mated identification and classification 
of records is crucial, says Craig Rhine- 
hart, director of compliance products 
and solutions at Costa Mesa, Calif.- 
based FileNet. “If you think you'll get 
10,000 users to manually declare and 
classify records, you’re wrong. Enforce 


your policy at the technology layer, not | 


at the user layer,” he says. 

Connerton says she wouldn’t trust an 
automated categorization system alone 
— asentiment Blair agrees with. “You 
can get part of the way there with real- 





ly good tools, but ultimately, you need 
to rely on employees,” he says, and that 
requires both policy and training. 

At P&G, employees attend a 15-minute 
training session and an annual refresher. 
They are also required to review their 
files annually to comply with P&G’s 
retention schedules, Connerton says. 

Records management best practices 
must be infused throughout the IT sys- 
tems that create or touch records, prac- 
titioners say. Connerton is working 
with IT to integrate e-records guide- 
lines into the P&G’s information sys- 
tems. With business units ranging 
from pharmaceuticals to dog food 
producers, that’s not an easy task. 

“We can’t impose them immediately 
because there are legacy systems that 
are too expensive to retrofit,” explains 
Connerton. It will be five to seven 
years before every document reposito- 
ry is in compliance, she says. 

Larry Hawkins, director of records 
and information compliance at First- 
Energy, says he collaborates with IT 
on new system designs. “We don’t pro- 
cure technology without a thorough 
review,” he says. @ 54300 


MORE ONLINE 


Read a collection of crucial information about 


| e-records and the rules that govern them: 


QuickLink 54584 


Records management is becoming a big part of 
information life-cycle management: 


QuickLink 54310 


See a list of standards organizations that are 
working on e-records: 


QuickLink 54585 
www.computerworld.com 
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PAY MORE ATTENTION TO SERVERS 
BEFORE YOU BUY THEM. 


SO YOU CAN PAY LESS ATTENTION 
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xSeries 236 Express 


Designed to improve 
performance and availability, 
with a range of features 
such as redundant hot-swap 
power and cooling 


System features 


$2,989* 


IBM Financing Advantage 
$82 | t 


IBM TotalStorage 


IBM eServer xSeries 346 Express 


Help maximize performance 
and improve availability in a 
rack dense environment with 
Xtended Design Architecture 
Includes features like Calibrated 
Vectored Cooling, an IBM 
innovation that helps to keep 
your system cool and improve 
uptime 


System features 


IBM Director 


Limited warranty 


ars on-sit 
years On-site 


$3,999* 


IBM Financing Advantage 
nly $109 per 


BM eServer xSeries 366 Express 


With the power of 3rd generation 
Enterprise X-Architecture,” it sets 
a new standard for 4-socket 
64-bit servers. Delivers increased 
performance, systems manage- 
ability, and simultaneous support 
for 32 and 64-bit apps 


System features 


$13,779* 


IBM Financing Advantage 
nly $379 per mont 
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IBM TotalStorage DS300 Express 


Entry-level, cost-effective SCS! storage systems 
designed to deliver advanced functionality at a 
breakthrough price. Provides an exceptional 
solution for work group storage applications, such 


System features 


Support for up to 14 


as e-mail, file, print, database and Intel Xeon 


Processor-based servers. 


3U rack-mount entry level 


Ultra320 SCSI disk drives 
Starts at 584GB / Scales to 4.2TB 


IBM eServer BladeCenter HS20 Express 


Designed to support the Intel 


Xeon Processor and packed 


vith high-availability features, 


the eServer BladeCenter 


HS20 with industry-leading 
modular design delivers density 
without sacrificing processor 
performance 


System features 


$2,589* 


IBM Financing Advantage 
y $71; 


Simultaneous support of 
heterogeneous operating 
system environments for 
xSeries and BladeCenter 

Limited warranty: 1 year 
on-site 


IBM Financing Advantage 
Only $147 per month 





TO THEM AFTER. 


With IBM* Express Servers and Storage™ 
designed for mid-sized businesses, help is here. 


You've already got a zillion things that require your 
attention — you shouldn't have to worry about your systems 
That's why IBM Express products offer enhanced reliability 
which helps them do their job so you can focus on yours 


Take IBM Director, for example: It proactively notifies you 
of a potential problem —up to 48 hours in advance. Or our 
Calibrated Vectored Cooling feature available on select 
xSeries systems. It cools your system more efficiently. 
This means more features can be packed into a smaller 
server. Giving you more functionality and greater flexibility 


It's just an example of our self-managing features that help 
you take back control of your IT. Which can help lower 
your maintenance costs, too. Because with IBM Express 
Servers and Storage, innovation comes standard. It's not 
optional. Plain and simple, it’s built in 


There's also one more great feature — your IBM Business 
Partner. Which means you can have a one-to-one chat 
with someone who understands your industry and your 
business — and who's located in your neck of the woods 
And for mid-sized businesses, that’s really big help ina 
really big way. 


IBM TotalStorage DS400 Express System features 


With advanced functionality, the DS400 provides 
an exceptional solution for work group storage 
applications. It supports Intel Xeon Processor- 
based servers and offers Fibre Channel drives 
designed for high performance, and hot-swap 


Ultra320 SCSI drives designed for high reliability. From $8,495* 


2GB Fibre Channel storage 
systems area network (SAN) 


3U rack-mount entry level 
Starts at 584GB / Scales to 5.8TB 


@&@ THE WORLD’S HELP DESK 


Learn more about our full 
range of TBM Express 
products Ana find me 
TBM Business Parmer 
near yor - Who is TEM 
trained to Know which 
sytemS meet your specific 
requirements. 


ibm.com/eserver/helpishere1 


1-800-IBM-7777 
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HELP FOR ANY SIZE PROBLEM 


& 


Simultaneous support of 
neterogeneous operating 
system environments for 
xSeries and BladeCenter 


Limited warranty: 1 year on-site 


IBM Financing Advantage 
Only $234 per month 
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OO OFTEN, promising inte- | 
gration projects wind up 
as expensive flops. The 
FBI’s failed four-year, 
$170 million Virtual Case 
File project is only the lat- 
est example to make the 
news. On May 24, FBI 
Director Robert Mueller reported to 
Congress that the first phase of the re- 
placement system won't be ready until 
2006, at a cost yet to be announced. 

While few integration projects are 
that costly in pure dollar terms, they 
can still make or break an organiza- 
tion. With the increasing commoditi- 
zation of both hardware and software, 
technology alone is no longer the key. 
Rather, business success hinges on 
how well those products are integrat- 
ed to advance business goals. 

“The applications themselves are 
not the differentiator,” says John 
Schmidt, president of the Integration 
Consortium, an industry group work- 
ing to establish standards, guidelines 
and best practices for integration proj- 
ects. “It’s how well you can glue them | 





Systems integrators earn their living making 
technologies work together. Here, some veterans 
offer advice on planning and executing successful 
integration projects. BY DREW ROBB 


all together and connect with cus- 
tomers and suppliers.” 

Schmidt has worked in the IT indus- 
try for 27 years and has spent the past 
15 helping major North American and 
European retail, financial and telecom- 
munications corporations integrate 
their systems. Computerworld asked 
Schmidt and other experienced sys- 
tems integrators for advice that could 
help IT managers with their integra- 
tion projects. 


Getting Agreement 
Systems integration is often thought to 
refer to the effort to make systems 
work together harmoniously. Perhaps 
less understood, however, is that those 
systems must also be closely aligned 
with the overall business strategy. 
“The most critical phase of the proj- 
ect includes really understanding its 
purpose before it starts and interview- 
ing all stakeholders to find out their de- 
finition of what will make the project 
successful,” says Bob Woodruff, CEO of 
project management consulting firm 
Robbins-Gioia LLC in Alexandria, Va. 





Unfortunately, few companies ap- 
pear to heed this advice. Woodruff has 
worked in project management for 20 
years and says that people with the 
most clout in an organization tend to 
get their projects funded, whether or 
not they are the most important pro- 
jects for the company as a whole. This 
can wreak havoc for the IT staff. 

“These sponsors are typically un- 
aware of the impact caused by inserting 
new technology into an already existing 
environment,” he says. “This leaves the 
IT manager in the unenviable position 
of trying to integrate systems that just 
don’t work well together.” 

For example, Woodruff is oversee- 
ing the update of his own firm’s enter- 
prise architecture. Systems that are 
based on Oracle or SQL databases 
are simple to integrate — just write 
some SQL queries, pull the data out, 
reformat it and dump it into the other 
system. Systems that export the data 
into an Excel spreadsheet require a 
bit more work. Even worse are the 
proprietary, nondatabase systems, 
some of which require manual re- 
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entry of data into the new systems. 

“Some pieces we may not convert be- 
cause of the cost involved, the timing, 
the real value to the company,” Wood- 
ruff says. “If we are going to replace it 
in a year or two, we will just leave it.” 

He advises avoiding projects with- 
out sufficient executive sponsorship or 
funding, pet projects that provide only 
short-term gain and projects that have 
ill-defined requirements. 

To be fair, though, IT can also be 
guilty of failing to coordinate integra- 
tion projects. Michael Kuhbock, CEO 
of K-Bear Corp., a business strategy 
consulting firm in Calgary, Alberta, 
has seen cases where IT departments 
bought middleware licenses, assem- 
bled project teams and created budgets 
before consulting with the business 
units. 

“On one case, it took another three 
months to bring the business on 
board,” Kuhbock says. “That happens 
day-to-day in the market.” 


Assembling the Team 


After hashing out the project scope 
and purpose, it’s time to assemble the 
integration team. That can involve a 
mix of internal and external resources. 

“IT managers can find the expertise 
they need in several places,” says Liz 
Mann, managing director of Mycroft 
Inc., an identity management and secu- 
rity firm in New York. “They can find 
it within their own organization, they 
can utilize product-specific expertise 
from the vendors, and they can use 
expertise from integration consulting 
companies.” 

Major projects require expertise in a 
broad array of technologies. 

“There have been many waves of 
application technology over the years 
that seem to move in regular seven- 
year cycles — for example, main- 
frames to mini- to microcomputers, 
or monolithic to client/server to Web 
service applications,” Schmidt says. 
“The shift from one wave to the next 
is neither instantaneous nor necessari- 
ly economically justified, so an inte- 
gration methodology must deal with 
three to four generations of technol- 
ogy at once.” 

While the right mix of technical 
skills is critical, integration projects 
can be scuttled by the “religious” wars 
surrounding some technologies. 

“You should stay agnostic as applied 
to technology and stay away from 
those who are devout,” says Gerard 
McGowan, vice president of technol- 
ogy and services at Innovativ Inc., an 
integrator in Edison, NJ. 

Schmidt says this also applies when 
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selecting a consultant or vendor to join 
the project. When someone tries to 
present a single solution, such as im- 
plementing a service-oriented archi- 
tecture, he shows that person the door. 

“It is not that a service-oriented 
architecture is bad, but it is presented 
as if it will solve all your integration 
problems,” he explains. “There are no 
silver-bullet solutions, and you should 
avoid that pitfall.” 


Limits of Standards 

An issue raised by several of the inte- 
grators is that while you should defi- 
nitely look to incorporate industry 
standards when designing an enter- 
prise architecture, they don’t necessar- 
ily guarantee interoperability. 

“Even successful standards, such 
as TCP/IP, are not universal,” says 
Schmidt. “When it comes to software 
standards such as Cobol or Java, inter- 
operability and transportability come 
at the expense of vendor-specific ex- 
tensions, forcing developers to use a 
less-than-ideal core set of ‘pure’ lan- 
guage features.” 

This is particularly true when imple- 
menting new technologies. McGowan 
points out that while voice over IP is 
becoming more popular, it’s still better 
to rely on a single vendor than to hope 
that pieces coming from different com- 
panies will work together properly. 

“There is talk about generic [Ses- 
sion Initiation Protocol] stacks and 
open-source SIP, but when you try to 
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tively ugly, relatively quickly,” Mc- 
Gowan says. 

The same applies for authentication, 
according to Mann. The Security As- 
sertion Markup Language (SAML) is 
designed to allow the exchange of au- 
thentication materials between dissim- 
ilar authentication systems or multiple 
versions of a single system that have 
been installed across a corporate or 
divisional boundary. But developers 
have options in how they implement 
the standard, so although different 
products can be made to talk to one 
another, they won’t necessarily do so 
out of the box. 

“You may find that two vendors are 
SAML-compliant, but when you try to 
make that exchange, it doesn’t work,” 
Mann says. “It is not that either one 
failed to implement the standard, but 
they both did it slightly differently.” 

But these problems tend to disap- 
pear, or at least get easier to deal with, 
as time goes on. “The more mature 
technologies tend to have good, well- 
proven cross-vendor support,” says 
McGowan. 


No Five-Year Plans 


Because technology and business 
needs are constantly changing, you 
can’t operate with Soviet-style five- 
year plans. Mergers and acquisitions, 


| software and hardware updates, chang- 


ing economic conditions and numer- 
ous other factors all mandate achiev- 
ing shorter-term results. So break larg- 


integrate that stuff, it tends to get rela- | er projects down into small pieces. 
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“I think people recognize today that 
new technology deployments are an 
ongoing process,” says Mann. “They 
don’t do these ‘pie in the sky’ projects 
anymore.” 

She recommends breaking longer- 
term projects into 90-day chunks, each 
with a discrete deliverable. 

“If you take too long to deliver infra- 
structure and discrete successes are 
not noticeabie, you will probably lose 
your funding or lose momentum on 
your project,” Mann says. 

In working on smaller pieces, how- 
ever, don’t lose sight of the bigger pic- 
ture. It requires a balance between the 
strategic and the tactical, and every bit 
must advance the overall long-term 
business and IT plans. 

“Integration is often seen as a 
project-based technological event 
rather than a mission-critical, enter- 
prisewide business strategy,” Kuhbock 
cautions. “We need to change that.” 


IMtegrating Expertise 
Successful integration requires that 
you continually gain and update infor- 
mation on the best ways to link sys- 
tems. One way to achieve this is to be- 
come active in trade groups, such as 
the Integration Consortium, that de- 
velop and share information on how 
to integrate systems. You probably 
won't be the first one to try a particu- 
lar type of project, and you'd be better 
off learning the lessons from people 
who have been through it before than 
finding out on your own 12 months 
into the project. 

“It is important for end users and 
suppliers to engage in collaborative 
efforts in the industry,” says Schmidt. 
“When you do, play an active role in 
these organizations; don’t just read the 
papers others write.” 

Kuhbock emphasizes that integra- 
tion failures often boil down to weak- 
nesses in the personnel, not just the 
technology, and training on integration 
is essential for success. 

“Then we can achieve a 100% suc- 
cess rate instead of the failure rates we 
hear about now,” he says. “An automo- 
bile manufacturer wouldn’t make it if 
three out of 10 cars it built couldn’t 
make it off the lot.” @ 54478 
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Supercomputers 


DEFINITION 
Supercomputer is a relative term, referring 
to a computer that leads all others in pro- 
cessing capacity and calculation speed at 
the time it’s introduced. 


BY JAN MATLIS | 
UPERCOMPUTING is all 


about pushing out the 
leading edge of computer 
speed and performance. 
The sports metaphors that 
arise as research sites com- 


The early history of supercomputers 
is closely associated with Seymour 
Cray, who designed the first officially 
designated supercomputers for Con- 
trol Data Corp. in Minneapolis in the 
late 1960s. His first design, the CDC 
6600, had a pipelined scalar architec- 


pete to create the fastest supercomput- | ture and used the RISC instruction set 
er sometimes obscure the goal of that his team developed. In this archi- 


crunching numbers that had 
previously been uncrunchable 
— and thereby providing in- 
formation that had previously 
been inaccessible. 

Supercomputers have been 
used for weather forecasting, fluid 
dynamics (such as modeling air flow 
around airplanes or automobiles) and 
simulations of nuclear explosions — 
applications with vast numbers of vari- 
ables and equations that have to be 
solved or integrated numerically 
through an almost incomprehensible 
number of steps, or probabilistically 
by Monte Carlo sampling. 

The first machine generally referred 
to as a supercomputer (though not of- 
ficially designated as one), the IBM 
Naval Ordnance Research Caiculator, 
was used at Columbia University from 
1954 to 1963 to calculate missile trajec- 
tories. It predated microprocessors, 
had a clock speed of 1 microsecond 
and was able to perform about 15,000 
operations per second. 

About half a century later, the latest 
entry to the world of supercomputers, 
IBM’s Blue Gene/L at Lawrence Liver- 
more National Laboratory, will have 
131,072 microprocessors when fully 
assembled and was clocked at 135.3 tril- 
lion floating-point operations per 
second (TFLOPS) in March. 

The computer at Livermore will be 
used for nuclear weapons simulations. 
The Blue Gene family will also be used 
for biochemical applications, reflecting 
shifts in scientific focus, making intri- 
cate calculations to simulate protein 
folding specified by genetic codes. 
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tecture, a single CPU overlaps 
fetching, decoding and execut- 
ing instructions to process one 
instruction each clock cycle. 

Cray pushed the number 
crunching speed available from 
the pipelined scalar architecture with 
the CDC 7600 before developing a 
four-processor architecture with the 
CDC 8600. Multiple processors, how- 
ever, raised operating system and soft- 
ware issues. 

When Cray left CDC in 1972 to start 
his own company, Cray Research Inc., 
in his boyhood hometown of Chippe- 
wa Falls, Wis., he abandoned the multi- 
processor architecture in favor of vec- 
tor processing, a split that divides su- 
percomputing camps to this day. 

Cray Research pursued vector proc- 
essing, in which hardware was de- 
signed to unwrap “for” or “do” loops. 
Using a CDC 6600, the European Cen- 
tre for Medium-Range Weather Fore- 
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casts (ECMWF) produced a 10-day 
forecast in 12 days. But using one of 

| Cray Research’s first products, the 
Cray 1-A, the ECMWF was able to pro- 
duce a 10-day forecast in five hours. 


National Pride 


Throughout their early history, super- 
computers remained the province of 
large government agencies and gov- 
ernment-funded institutions. The pro- 
duction runs of supercomputers were 
small, and their export was carefully 
controlled, since they were used in 
critical nuclear weapons research. 
They were also a source of national 


So when the National Science Foun- 
dation (NSF) decided in 1996 to buy a 
Japanese-made NEC supercomputer 
for its Colorado weather-research cen- 
ter, the decision was seen as another 
nail in the coffin of U.S. technological 
greatness. Antidumping legislation 
was brought to bear against the impor- 
tation of Japanese supercomputers, 
which were and still are based on im- 
provements on vector processing. 

But within two years of the NSF’s 
decision, the supercomputing land- 
scape changed. The antidumping deci- 
sion was revoked. And the ban on ex- 
porting supercomputers to nuclear- 
capable nations was also partially re- 
scinded. What had happened? 

For one thing, microprocessor 
speeds found on desktops had over- 
taken the computing power of yester- 
year’s supercomputers. Video games 
were using the kind of processing 
power that had previously been avail- 
able only in government laboratories. 
The first Bush administration defined 
supercomputers as being able to per- 
form more than 195 million theoretical 
operations per second (MTOPS). By 
1997, ordinary microprocessors were 
capable of over 450 MTOPS. 

Technologists began building dis- 
tributed and massively parallel super- 





pride, symbolic of technical leadership. 


18M/COLUMBIA UNIVERSITY 





The Linpack 
Benchmark 


IN ORDER TO COMPARE the speeds at 
which supercomputers operate, they need 
to be performing the same tasks. The Lin- 
pack benchmark measures how fast a 
computer solves dense systems of linear 
equations and measures a system's float- 
ing-point computing power. 

The benchmark is based on Linpack, a 
software library for performing numerical 
linear algebra on digital computers that 
was written in Fortran by computer scien- 
tists Jack Dongarra, Jim Bunch, Cleve 
Moler and Pete Stewart in the 1970s. 

Dongarra, now a distinguished profes- 
sor of computer science at the University 
of Tennessee, later introduced the Linpack 
benchmark, which is used as the perfor- 
mance measure for ranking supercomput- 
ers in the Top500 list of the world’s fastest 


computers. 
- Jan Matlis 


computers and were able to tackle the 
operating system and software prob- 
lems that had deterred Seymour Cray 
from multiprocessing 40 years before. 
Peripheral speeds had increased so 
that I/O was no longer a bottleneck. 
High-speed communications made dis- 
tributed and parallel designs possible. 

As a result, vector processing tech- 
nology may be in eclipse. NEC Corp. 
produced the Earth Simulator in 2002, 
which uses 5,104 processors and vector 
technology. According to the Top500 
list of supercomputers (www.top500. 
org), the Simulator achieves 35.86 
TFLOPS. IBM’s Blue Gene/L, the 
current leader, is expected to achieve 
about 200 TFLOPS. It consumes 15 
times less power per computation and 
is about 50 times smaller than previous 
supercomputers. 

As detailed on the Top500 site, the 
trend in supercomputers is toward 
clusters of scalar processors running 
Linux and leveraging the power of off- 
the-shelf microprocessors, open- 
source operating systems and 50 years 
of experience with the middleware 
needed to pull these elements 


together. @ 54435 
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More Thana Token — 


Overhaul of the VPN 


Amove to two-factor authentication gives 
our security manager a chance to secure his 
VPN infrastructure. By Mathias Thurman 


UR EXECUTIVE TEAM 
finally approved the 
use of two-factor au- 
thentication for all vir- 
tual private network access 
into our corporate network. 
This means we'll get to over- 
haul the way we deploy our 
Cisco VPN infrastructure. 

Currently, when a user re- 
quests virtual private network 
access, we provide the VPN 
software and a VPN 
profile that the user 
has to import into the 
VPN client. 

The user then 
launches the VPN 
software, authenti- 
cates and is placed in 
a group that’s defined within 
the Cisco Secure Access Con- 
trol Server (ACS). As things 
now stand, all groups are 
configured to allow access to 
just about everything in the 
company. 

This isn’t very secure, of 
course, because a user within 
the sales organization, for 
example, has the ability to 
reach out to production Unix 
servers. Granted, if the server 
was configured properly, ac- 
cess would be denied if the 
user didn’t have a valid ac- 
count on the Unix server. 

But if the server wasn’t con- 
figured properly, a malicious 
user could gain unauthorized 
access. What’s more, a mali- 
cious user who isn’t barred 
from any part of the network 
could attempt any number 
of other activities, including 
denial-of-service and man-in- 
the-middle attacks. So, as we 
now move to strong two-factor 
authentication, we have an 
opportunity to tie down our 
systems much more securely. 

In implementing two-factor 
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authentication, we’re using 
RSA Security Inc.’s SecurID 
tokens, with corresponding 
access control provided by 
Cisco Systems Inc. The RSA 
SecurID token servers and as- 
sociated tokens provide only 
for authentication; the tokens 
don’t dictate which areas of 
the network an employee will 
have permission to access. 
This authorization piece is 

— handled by the 
Cisco ACS. 

With the ACS, 
groups of users are 
defined and then as- 
signed specific net- 
works or hosts that 
they can access. 

For example, a contractor 
assigned as an auditor in the 
finance department doesn’t 
need access to human re- 
sources systems. We can con- 
figure a group within the ACS 
and place in that group only 
the finance servers that the 
contractor will need to per- 
form his job, plus some com- 
mon areas of the network, 
such as the company Web site 
and the Exchange e-mail 
servers. 

Once we’ve configured all 
of the groups we’re going to 
need, it’s just a matter of plac- 
ing each user in the correct 
group. So, how do we do that? 
Manually entering thousands 


It’s just a matter of 

placing each user in 
the correct group. So, 

how do we do that? 





of users is too cumbersome 
and time-consuming to be an 
option. For this task, we'll turn 
to a directory server. We use 
Lightweight Directory Access 
Protocol for many functions 
within the company and have 
had great success with it. 

Our LDAP environment is 
becoming more and more use- 
ful, allowing us to more easily 
handle chores such as storing 
user credentials or granting 
access-control rights for 
applications. 


Duplicating Groups 

In the case of this VPN proj- 
ect, we want to create the 
same groups within LDAP that 
we have defined for our Cisco 
ACS access groups. Once 
those groups exist within 
LDAP, a help desk administra- 
tor responding to an approved 
and verified request for VPN 
access can simply call up a 
Web-based account-provision- 
ing dashboard and mark a 
checkbox for the appropriate 
access group. 

After that, when the user 
launches his VPN client and 
authenticates with the Secur- 
ID token, the Cisco ACS will 
first look to see if the user ex- 
ists within the ACS. If the user 
can’t be found there, the ACS 
will go out to our LDAP server 
to see if he exists there. 

If the user is found in the 
LDAP server and has been as- 
signed to a corresponding ac- 
cess group, then he will be 
added to the ACS and placed 
in the appropriate access 
group. And if the user isn’t 
found in the LDAP server, 
then he can be assigned to a 
default restrictive group. 

I know this seems like a lot 
of transactions, but in prac- 
tice, it should take only a cou- 
ple of seconds. The only diffi- 
culty we’re having is that the 
current incarnation of the Cis- 
co ACS has some restrictions 





on how it can interoperate 
with LDAP. Once those issues 
are resolved, we can move for- 
ward with the proposed archi- 
tecture. 

We've decided that instead 
of providing our users with 
the hardware security tokens, 
we will deploy software to- 
kens. The software tokens are 


| installed on users’ PCs and 


provide the same level of se- 
curity as the hardware tokens. 
The software, combined with 
a unique “seed” file and a 
user-configured PIN, provides 
for two-factor authentication. 

The software frees users 
from having to carry a token 
with them, but the problem 
is that the software tokens 
aren’t as user-friendly as the 
hardware tokens. 

With the hardware tokens, 
a user inserts his PIN, directly 
followed by the number dis- 
played on the token, which 
becomes his passcode. 

With the software token, 
when the user keys in his PIN, 
the token presents a passcode, 
which the user has to copy 
and paste from within the 
token to the application he’s 
accessing. 

The software tokens have 
other advantages, since they 
are considerably cheaper and 
can be mass-deployed more 


easily than the hardware — we | 


just provide Web links and use 
provisioning software. 

One more thing: There’s a 
nice integration feature when 
using the Cisco VPN product 
with the RSA software tokens. 
When the user accesses the 
VPN, he’s prompted only for 
his PIN, and on the back end, 
the software automatically 


| fills in the appropriate token 


code from the RSA software. 

So for now, we’ll continue to 
define our access groups and 
come up with a work-around 
for getting users from LDAP 
to the Cisco ACS. D 
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fects the Vet antivirus engine 
underlying CA's enterprise 
and consumer security soft- 
ware, could be exploited by a 
remote attacker via a specially 
crafted Microsoft Word docu- 
ment to cause a heap overflow 
and execute malicious code, 
according to CA. Enterprise 
users received a patch at the 
beginning of this month. 


Files Encrypted, 
Held Hostage 
Ahacker has found a way to 
encode computer files and 
hold them hostage until the 
victim pays for a decoder tool, 
said Websense Inc., which un- 
covered the extortion attempt. 
But there’s a way to avoid pay- 
ing ransom: Lurhg Corp. said it 
found the encryption scheme 
relatively easy to break. 
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UPS Aims to Ease | 
Trade Management | 


@ UPS Trade Management Ser- 
vices Inc., a unit of UPS Supply 
Chain Solutions in Alpharetta, 
Ga., announced a software suite 
designed to simplify international 
trade management. UPS Trade- 
Sense is aimed at helping U.S. 
exporters and importers manage 
customs clearance and security 
regulations. It allows companies 
to keep trade data in one location 
for easier management and con- 
nectivity to global supply chain 
partners. The software also has 
screen-level security protocols 
that require users to login witha | 
personal identification code and 
allow access only to parts of the 
system they are authorized to use. 
UPS TradeSense is available now. 


Start-up Releases 
Exchange Tool 


& Fremont, Calif.-based Zenprise 
Inc.’s first product offers real- 
time, automated diagnosis and 
resolution of operational prob- 
lems across Microsoft Exchange 
e-mail systems. Due to ship in 
August, Zenprise automatically 
analyzes the Exchange environ- 
ment, develops historical perfor- 
mance baselines and predicts 
performance problems. Zenprise 
also includes a diagnostic and re- 
pair database of Exchange symp- 
toms and causes. Pricing starts 
at $15 per user per year. 


IBM Blade Server 
Package Debuts 


@ IBM has released an integrated 
blade system for the small-to- 
midsize corporate market that’s 
preconfigured and tested. The 
system is also preloaded with 
IBM Workplace Services Express 
and other software on an IBM 
eServer BladeCenter HS20 sys- 
tem. Pricing starts at $120 per 
month for a portal server that can 
handle 20 users, or $160 per 
month for a business integration 
server that can handle up to 
1,000 catalog entries. Other pric- 
ing options are available. 
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Linux Muscles Into 
crosoft’s Space 


S LINUX A BETTER CHOICE for business than, 
Say, a proprietary operating system such as 
Microsoft Windows? The debate, full of passion 
and conviction, rages on both sides of this issue. 
Over the past several years, Linux has elevated 
itself as a respectable competitor despite Microsoft’s 
dominance in the operating systems market. Linux is 
used extensively in today’s business operating plat- 


forms, in Web servers, the 
Domain Name System, FTP, 
e-mail, firewalls, Web host- 
ing, network monitoring and 
desktop applications, for ex- 
ample. Some form of Linux 
is used in nearly 80% of 
companies today. Most of 
them deploy it from a server 
level, and interest in desktop 
functionality is growing. 

The rapid migration of Linux 
inside global businesses 

and government agencies 

is likely related to the in- 
crease in quality, security 
and cost-effectiveness that Linux 
provides. 

Of course, there are arguments from 
both sides. But when you compare Linux 
and Windows applications feature for 
feature, there is very little, if anything, 
that Microsoft has that Linux hasn’t yet 
perfected. 

Security and reliability are, of course, 
another concern. How can migrating 
businesses be sure that the security and 
reliability of their networks will, at the 
very least, stay intact? Looking at some 
facts and figures provides a good start. 
In the past few years, Microsoft has ex- 
perienced near-catastrophic exploita- 
tions with the MyDoom, Nimda and MS 
Blaster worms. These system exploita- 
tions affected countless users and cost 
individuals, corporations and govern- 
ment agencies millions of dollars in 
damages and downtime. Since then, 
Microsoft has had to account for the in- 
advertent release of part of its sanctified 





source code, as well as the 
much-publicized Internet 
Explorer vulnerabilities that 
have forced many users 
to change their preferred 
Web browsers. In response, 
Microsoft attempted to 
heighten security on all ap- 
plications to prevent further 
incidents. 

It’s not as if Linux hasn’t 
also had its share of vulner- 
abilities. The notable differ- 


ence, though, is in the initial | 


discovery and patching of 
existing vulnerabilities. Vul- 


| nerabilities within a code are, for the 


most part, inevitable, but users will find 
with Linux that vulnerabilities are iden- 
tified and patches are released quickly, 
in many cases before users are even 
aware that there’s a problem. Moreover, 
the Linux community, as opposed to pro- 
prietary vendors, provides innate securi- 
ty enhancements and affords a substan- 
tial number of resources from develop- 
ers in the community to ensure that even 
seemingly insignificant security flaws 
are properly addressed. 

Since security and reliability go hand 
in hand, it’s a fair assumption that the re- 
liability of Microsoft systems may also 
be lacking. If a system is open to ex- 
ploitation, downtime as a result of a 
worm or virus is unavoidable. Further- 
more, with such restricted access to the 
source code, it’s possible that code flaws 
and bugs aren't identified as readily, 
leaving business-critical applications 
sluggish and unpredictable. Alternative- 





| ly, Linux uses the resources of a collabo- 

rative development environment, pro- 
viding vendors with methodically tested 

| code, minimizing the occurrence of 

flaws and bugs. In addition, this design 

| model offers rapid application evolution 


and advanced technologies for ever- 


| changing business needs. With frequent 
| application updates and upgrades, Linux 
| systems consistently operate efficiently 


and effectively. 
“Linux is merely a Unix derivative, 
and Unix is a better operating system for 


| business,” says programmer Angel 
| Gomez, who is also chief technology of- 


ficer at Datatek Applications Inc. in 


| Bridgewater, NJ. “Whether it’s SunOS or 

| OpenBSD, they ail have one thing in 
common: They meet the Posix applica- 

| tions interface, which means that busi- 


ness programs can move from one plat- 
form to another without any changes.” 
Unix was the very first nonproprietary 


| networked operating system and has ex- 
| perienced relatively few flaws. Bell Labs 


researchers created it in a time when 
perfection, not an instant return on in- 
vestment, was the objective. Because 
Linux is essentially a Unix derivative, it 
follows the same mantra. 

Garnering trust in an open-source op- 
erating system can be tough, and one of 
the major downfalls for Linux is its per- 
ceived lack of end-user support. Al- 
though that may have been true in years 
past, the rapid adoption of Linux for its 
superior quality and cost-effectiveness 
has driven Linux vendors to provide 
comprehensive technical and customer 
support. Which means, according to 
Gomez, that “new hardware does not im- 
ply new software. When a business has 
to invest in a custom software base, it is 
not prudent to base it on a single vendor 
proprietary operating system 

With Linux, the uptime is high, the 
price is low, and the flexibility is amaz- 


ing. @ 54488 
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HACKERS, VIRUSES, 
AND WORMS 


ARE MET WITH SWIFT 
AND DECISIVE ACTION 


MICROSOFT.COM/SECURITY/IT 
Microsoft 





Find the tools and guidance you need for a well-guarded network 


at microsoft.com/security/IT 


> Microsoft Windows XP Service Pack 2: Download it for 
free and get stronger system control and proactive protection 
against security threats. 


» Free Tools & Updates: Download free software like Microsoft 
Baseline Security Analyzer to verify that your systems are 
configured to maximize security. Manage software updates 
easily with Windows Server Update Services 


» Microsoft Risk Assessment Tool: Complete this free, Web-based 
self-assessment to help you evaluate your organization’s security 
practices and identify areas for improvement. 


> Internet Security and Acceleration Server 2004: Download 
the free 120-day trial version to evaluate how the advanced 
application-layer firewall, VPN, and Web cache solution can 
improve network security and performance. 


Microsoft 








CASE STUDY | Q&A OPINION 

Software Reuse: Innovation at the Edge We’re Mad as 

Making It Work The future lies at the edge of your Hell, But... 

DTE Energy has set up its | company, where it can reach across Users may be fed up with lop- 
own “open-source” software | geographic, corporate and even sided software licenses, says 
operation. Here’s how it got : competitive boundaries to add val- Gary H. Anthes, but most aren’t 
in-house developers to hny 4 ue, say authors John Hagel III (far yet ready to do the hard work 
into reuse. Page 37 left) and John Seely Brown. Page 38 of fighting back. Page 40 


OU DON’T HAVE TO BE AN IT VETERAN to have at 
least one scar that was inflicted by the merger or 
acquisition of one of your major technology 
providers. For Rick Omartian, IT chief financial 
officer at The Guardian Life Insurance Company 
of America in New York, make that two, going on 
three. After watching Meta Group get eaten by Gartner Inc. and 
PeopleSoft get chomped by Oracle Corp., he’s now focused uneas- 
ily on the CRM market as a customer of the beleaguered Siebel 
Systems Inc. 
Meanwhile, Robert Robinson, business systems supervisor at 
Durr Industries Inc. in Plymouth, Mich., is one of many former 


Here's how to antici 
pate and respond 
when a major supplier 
is getting swallowed 
up. By Mary Brandel 
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J.D. Edwards customers now experiencing what 
some might call a “twofer.” Now that Oracle has ac- 
quired PeopleSoft, which two years ago bought J.D. 
Edwards, “it’s like watching a fish get swallowed by a 
seal, and then the seal gets swallowed by a whale,” he 
says. “Everyone’s aghast at the seal [being swal- 
lowed], but no one remembers the fish.” 

And more merger and acquisition (M&A) activity 
is forecast. Leaving out top vendors like Microsoft 
Corp., Hewlett-Packard Co., Oracle, SAP AG and 
IBM, “if you look at the eight-to-10-year life cycle of a 
major software product, you can assume that 30% to 
40% of those companies will be acquired,” says Dale 
Kutnick, director of research at Gartner. 

Last year, according to Kutnick, M&As among 
technology companies reached their highest levels 
since 2001, and he expects that trend to continue this 
year. The upshot: IT executives should be poised to 
anticipate and respond to vendor M&As. 

Here are some tips from M&A veterans about how 
to survive — and maybe even benefit — when your 
IT vendors merge. 

UNDERSTAND THE VENDOR. If your vendor is being 
acquired, you need to understand the acquirer. Ac- 
cording to Lou Mazzucchelli, a fellow at Cutter Con- 
sortium in Arlington, Mass., there are two types of 
acquirer: those interested in milking maintenance 
revenues from a strong but stagnant installed base, 
and those intending to grow their customer base by 
subsuming a competitor. 

With the first type, “there’s a vested interest in 
keeping you as part of the installed base,” he says. 

The second type is more problematic because 
there’s no reason for two competitive products to co- 
exist. “If you’re on the wrong side, your application is 
going away,” Mazzucchelli says. “I wouldn’t be sur- 
prised if they used strong incentives for the cus- 
tomer to switch sooner rather than later.” Even if the 
vendor promises to keep the product alive, don’t look 
for new features. 

GET A SECOND, THIRD, EVEN FOURTH OPINION. Nobody 
holds all the pieces to an M&A puzzle, so Omartian 
gets lots of opinions. When he first heard the rum- 
blings that Oracle intended to buy PeopleSoft, he 
consulted a range of sources. They included Guard- 
ian’s investments division, other companies using the 
vendors’ products, research firms, industry analysts, 
independent user groups, media articles and senior 
executives at both vendor companies. He asked 
about the likelihood of the merger’s success, what 
both companies stood to lose or gain and possible 
outcomes for product lines. 

When talking to the acquirer, the more senior the 
manager you buttonhole, the better, Omartian says, 
since higher-level executives are more likely to stick 
around postmerger. But balance that input with what 
you hear among the rank and file. “Look at informa- 
tion from all your sources,” he says. 

TRUST, BUT VERIFY. Particularly when talking with 
corporate representatives, don’t believe everything 
you hear unless it’s also in writing. “I’ve been 
through a lot of mergers, and things change day to 
day,” Omartian says. “Nothing’s certain in a merger.” 

Others agree. During the PeopleSoft/Oracle merg- 
er, many customers insisted on meeting directly with 
CEO Larry Ellison before they believed reports that 
they’d be supported through 2013, says Jason Aver- 
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book, CEO at Knowledge Infusion, a consulting firm 
in Danville, Calif. 

Robinson is applying the skepticism he acquired 
during the J.D. Edwards acquisition to the Oracle 
purchase of PeopleSoft. “Questions get asked and an- 
swered, but it’s just words,” he says. “What it really 
comes down to are the deeds.” 

For instance, Oracle has promised to work through 
the Quest International User Group to fulfill re- 
quests for product enhancements from the former 
J.D. Edwards — a practice PeopleSoft dropped, much 
to Robinson’s dismay, when it bought that company. 
At an upcoming Quest meeting, the group plans to 
submit some requests to check that promise. “It’s a 
test balloon to see if the process will work,” Robin- 
son says. 

IF YOU HAVE LEVERAGE, ACT QUICKLY. Companies with 
a large investment in the acquired technology have 
some bargaining to do. In the early part of a merger, 
acquiring firms are particularly sensitive about stabi- 
lizing revenues. That’s the time customers have the 
most leverage, and that’s why Mazzucchelli advises 
that you huddle with the acquiring vendor quickly. 

“At the instant of the acquisition’s closing, if you 
have any leverage at all, play your cards immediately 
and let them know, ‘I get my concessions or I walk,” 
he says. “You've got to play hardball, and the longer 
you wait, the less negotiating power you have.” 

Omartian agrees. “When we meet with senior 
managers, we make clear to them what we’re happy 
with in the relationship and that if we don’t see that 
continuing, we won't be in a long-term relationship,” 
he says. 





MEAN IT. If you threaten to walk, you have to be 
prepared to do it, and that means having an alterna- 
tive in mind. Start by knowing the value of the soft- 
ware to your organization, Mazzucchelli says. Aver- 
book points out that companies tend to use only 20% 
to 30% of the features in a software application, so 
find out which ones you actually need. 

Begin running tests of open-source versions of 
your applications. Even if you can’t feasibly fall back 
on them, just going through the motions should be 
enough to get the vendor to take the threat seriously. 
“If I’m highly dependent on a proprietary application 
that does function x, I want an open-source version 
in my lab so I can use that to put pressure on a ven- 
dor,” Mazzucchelli says. 

HAVE A PLAN. Prepare what Averbook calls a “tech- 
nology strategy map,” aligning the goals and initia- 
tives of your company over the next three years with 
the technology to support those goals. This will en- 
able you to identify technology gaps, as well as one 
to three vendors that offer the required technology. 
When you know what you have and what you need 
going forward, you can make faster decisions about 
whether the new, combined company meets your 
needs, Averbook says. 

It beats freezing development while the merger 
shakes out, which can take six months to a year. 
“That’s like when two airlines merge, you stop flying 
until you figure out the new pricing model,” Aver- 
book says. “In this new era of software consolidation, 
it’s important for customers to take control of their 
own path.” 

BUILD IN PROTECTION. Use your software contracts 
to guarantee service levels and maintenance costs, 
Kutnick says, and consider requesting guaranteed 
discounts on maintenance costs in the event of an 
acquisition. 

Acquirers may not honor the level of service out- 
lined in a contract, Kutnick says, but at least you have 
a strong negotiating point to start with. 

“As long as you're contractually obligated to re- 
ceive that level of service, you have an out,” Omar- 
tian adds. Guardian also makes sure that it retains 
rights to escrow code when signing on with smaller 
vendors, so it can continue development even if the 
vendor disappears. 

BE SUSPICIOUS. Learn to read signs that a company 
is a potential target based on moves it’s making. “If 
they’re issuing a lot of press releases or expanding 
into new functional areas, you can figure they’ll be in 
this for a while,” Averbook says. But if you don’t see a 
lot of innovations to the product suite, that might be 
a company’s way of positioning itself to be bought. 

This doesn’t mean you need to avoid potential tar- 
gets, Kutnick says. Just maintain a clear delineation 
between applications that might fade from the scene 
and the software underlying your infrastructure. 

“Let’s say you’re going to do something with BEA, 
which is high on my list of likely acquired companies 
in the next three years,” Kutnick says. “You need to 
understand all the interfaces and document where 
you make changes. You can use it, but with open 
eyes.” @ 54379 


Brandel is a Computerworld contributing writer 
in Grand Rapids, Mich. You can contact her at 
mary.brandel@comcast.net. 
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T DTE ENERGY CO., lone 
wolves need not apply. 
“Lone-wolf developers” is 
actually what Lynne Ellyn 
calls them, and she says 
they are the reason so many 
companies fail at software reuse. Ellyn, 
a senior vice president and CIO at 
DTE Energy, claims that her company 
has found a better way — one that 
marries the principles of open-source 
software with keen insights into how 
people learn and what motivates them. 

Ellyn says the Detroit-based diversi- 
fied energy company has set up an 
internal “open-source” software opera- 
tion. Developers across the $7 billion 
company add their creations to a reuse 
library and take needed components 
from it. Sometimes they put the com- 
ponents back after improving them. 
The spirit of the program borrows 
heavily from the external open-source 
movement that’s behind the Linux op- 
erating system, the Apache Web server 
and other popular pieces of nonpropri- 
etary software. 

DTE Energy has focused on the con- 
cept of “meritocracy,” one of the under- 
pinnings of the open-source move- 
ment, according to Ellyn. Meritocracy 
has two basic tenets at the company: 
First, items submitted for inclusion in 
the reuse library must be reviewed and 
judged to be of high quality, or they 
won't be accepted. Second, the people 
whose submissions are accepted are 
held in high esteem by the development 
communities of which they are a part. 

This spirit of meritocracy, and the 
sense of community that goes with it, 
are the missing ingredients in most 
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Hold regular meetings of devel- 
opers at various levels. Let practi- 
tioners “own” the meetings. 
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Show “lone wolves” the door. 
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DTE Energy may have cracked 
the cultural side of reusable 
software. By Gary H. Anthes 


failed software-reuse efforts, Ellyn says. 
The review and approval function at 
DTE Energy is performed by a panel of 
five senior developers. “They are all 
pretty universally admired within the 


| organization for their excellence in 


software development,” Ellyn says, 
“so they have some stature with our 
community.” 

Some of the components included in 
the reuse library have been volunteered 
by programmers who developed them 
for a project and saw the possibility for 
broader use. In other cases, a develop- 
ment team has been commissioned by 
the review panel to develop something 
specifically for reuse. The panel reviews 
requirements at the beginning of all proj- 
ects, looking for reuse opportunities. 

“Either way,” Ellyn says, “[the com- 
ponent] still has to be judged, and the 
process of acceptance is one of recog- 
nizing the excellence in people. The 
dynamic is around public recognition 
of merit, and that’s very energizing.” 


SEPARATE CODE 


DTE Energy’s software-reuse program 
is based on the notion of shared ser- 
vices, in which various functions com- 
mon to multiple applications — such 
as security, logging, lookup or configu- 
ration — are carved off as separate 
code (usually Java) that can be invoked 
as services by new applications as they 
are built. 

Developers meet quarterly and some- 
times more often to discuss ideas, prob- 
lems and best practices. And meetings 





A Palette of 
Options 


of “development communities,” as for 
Java, happen once a month, says Phillip 
Smith, one of the five technical archi- 


tects on the review panel. “Supervisors 


don’t own our meetings; the practition- 
ers own them,” he says. “So it’s not 
your boss disseminating things; it’s a 
peer-to-peer type of communication.” 
People who have earned industry 
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certifications, such as for J2EE, are rec- 
ognized at these meetings, as are those 
who have contributed to the reuse 
repository. “We say, “This person has 
done great work. Let’s applaud that,’ ” 
Smith says. 

Developers also extensively use in- 
ternal mailing lists and discussion 
groups. Some of the 15 or so lists are 
devoted to specialized groups, while 
others include all 400 developers, 
Smith says. “Someone will send out a 
question like, ‘I’m struggling trying to 
get this inserted in the database. Has 
anyone out there come across this prob- 
lem?’ Regardless of the solution, it’s 
owned by the whole group. Everything 
is focused on community,” Smith says. 
Project teams are “cross-pollinated” 
with developers from different Michi- 
gan offices and with people of varying 
levels of ability, he says. 


"NO HIERARCHY 


Although contributors are publicly 
recognized, the company takes pains 
not to establish a hierarchy of develop- 


| ers. “We try to steer away from status, 


because status just divides people,” 


| Smith says. “We definitely applaud 


[reuse] and celebrate it, but it’s not 
like, ‘Oh, this person has submitted 
three components, and this other per- 
son has only submitted two.’” 

DTE Energy saved $75,000 last year 
by reusing components, estimates 
Smith. So far this year, four new proj- 
ects have incorporated 10 components 
each on average, or about 40% of their 
total application code. 

Without the kind of cultural support 
DTE provides, reuse is likely to suc- 
cumb to any number of technical pit- 
falls, says Tom Welsh, an analyst at 
Cutter Consortium in Arlington, Mass. 

“DTE is going in the right direction. 
Reuse is a corporate team business and 
cannot usually be undertaken by indi- 
viduals or even small groups,” says 
Welsh. 

Vamsi Dantulari is a Java program- 
mer working on a voice-response de- 
velopment project at DTE Energy. She 
says the project has used four source- 
code components from the reuse li- 
brary. Some of them would have taken 
weeks of development effort had she 
coded them from scratch, she says. 

Dantulari hasn’t yet contributed a 
component to the reuse library, but she 
did contribute to the development 
community recently by helping to set 
up a Java training program. “Two years 
back, not many people knew about 
me,” she notes. “But I got a lot of 
recognition for that.” @ 54381 
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Innovation 


Edge 


The place to look for 
an advantage is at the 
edge of your business, 
say John Hagel II] and 
John Seely Brown. 


Most companies are structured to run 
| their operations efficiently and squeeze 
as much profit as possible from each 
transaction. But emerging competitors 
in Asia are much more interested in innovation, and 
they’re changing the rules about how to achieve it. 

In their new book, The Only Sustainable Edge, John 
Hagel Ill and John Seely Brown look at this approach to 
innovation and its implications for U.S. compa- 
nies and IT organizations. They talked with 
Computerworld’s Thomas Hoffman about the 
changing business landscape. 





As you point out, most companies are structured to 
run efficiently, not to drive innovation. For companies 
to flip the equation, they'd need to make some pretty 
wrenching changes to their operating models, yes? 

JH: I would certainly accept that it’s a chal- 
lenge. To get better faster, you need to do that 
in partnership with other companies. No mat- 
ter how many smart people there are in your 
organization, there are a lot more smart people 
outside that you could work with. We tried to 
provide a path for companies to make this 
transition — develop those relationships to get 
better faster and develop capabilities faster. 

JSB: The first step is to move from a very closed 
view of innovation to a more open model where | 
there are suppliers and other people around the 
world that are at least as talented as people within 
our organization. [Then] we can ask questions such 
as, “How can we tap into their innovation?” and 
“What do we want to consider to be our distinctive 
edge?” and “How can we work with these people and 
extend our own capabilities?” 


~ 4 
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If you look at what we’re doing with computer ar- 
chitectures, we can take advantage of loose connec- 
tions and coordinate processes and practices with 
other organizations. From a technical point of view, 
we now have SOA [service-oriented architecture] 
and virtualization architectures and this whole no- 
tion of social software. Organizations can now exam- 
ine how this folds into SOAs to support long-lived 
conversations as opposed to short-lived transactions. 


Are some companies doing this effectively now? 

JH: One company that we profile extensively is Li 
& Fung in the apparel industry. [It] helps apparel de- 
signers assemble customized supply chains and deliv- 
er very tight performance requirements in terms of 
speed to market and cost and quality objectives, but 
[it’s] doing it in such a loosely coupled way. 

This parallels what the SOA and Web services 
community would talk about in defining interfaces 
to move one module in and one module out. Most 
American companies tend to very tightly define re- 
quirements throughout all stages of the process. 

A lot of this is being driven by the mind-set and 
the sense of urgency in Asia. There’s the sense that 
the wage rate advantages they have are very transi- 
tional and that if they fall back on that, they are 
going to rapidly lose market share. 


Why are the greatest opportunities found at the “edge,” whether 
it’s the edge of the business where companies interface with 
business partners or at the periphery of mature markets? 
JSB: At the edge, you have less inertia, so you can 
experiment, and you don’t have big legacy systems, 
so my competitive edge is to think about things 
differently. 
JH: At the edge, you will be able to build your ca- 
pabilities much more rapidly than organizations that 
are more inward-focused. 


| Isit fair to say that most companies will struggle, if not fail, 


at trying to move in this direction? 

JH: If they continue to be complacent 
and focus on operational efficiency versus 
driving capability, they will fail. 

What we see in these Asian companies is 
a focus on rapid innovation. It’s a much dif- 
ferent mind-set than what most Western 
companies do today. 

JSB: And Western companies [need] to 
recognize that they don’t have a divine right 
to be the main source of innovation. 


Are ClOs well positioned to support businesses that 
try to make these transformational changes? 

JH: IT is a key enabler of these practices, 
and CIOs can be catalysts and change agents 
to help senior management recognize what’s 


SOUERCL available to support these broader changes. 


There’s also the ability to recognize what’s possible 
through SOA, through loose coupling — an impor- 
tant foundation in recognizing new processes. 

JSB: Part of the irony is that it’s the IT infrastruc- 
ture — like monolithic ERP systems — that keeps 
businesses from experimenting with new things. 
It’s not always the big bang but the ability to make 
new iterations with blinding speed that drives new 
opportunities. @ 54421 
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A New 
Worldview 


We believe that a new opportu- 

nity and a new imperative - the 

acceleration of capability build- 

INABLE EDGE f} jing - will shift our individual and 

verenos on nanatee collective mind-sets from a 
rc |) Worldview that focuses on sta- 
f yi zero-sum relationships to 

one that emphasizes dynamic, 
non-zero-sum relationships. As 

we adopt these different perspectives, we will find that 
most of our institutions today are fundamentally lacking. 

Static, zero-sum worldviews generally arise when 
people focus on the allocation of existing resources. 
Existing resources have a fixed quantity, and with rel- 
atively modest exceptions, if one party acquires a re- 
source, other parties are deprived of that resource. 

With its 70-year focus on equilibrium states, the 
economics profession has reinforced this orientation. 
Equilibrium states are easier to model quantitatively, 
but such models simplify the world, including the key 
assumptions that capabilities are a given. 

f we recognize that capabilities are not a given but 
can be quickly built, our worldview undergoes a fun- 
damental shift. Now we become less concerned with 
the distribution of rents and more focused on the cre- 
ation of new rents. Relationships that were previously 
viewed as competitive become more complementary 
- we begin to realize that we need other specialized 
players if we wish to deepen our own capabilities 
more quickly. The new value we can create together 
moderates, even if it never entirely eliminates, the 
concerns about the distribution of the proceeds. We 
begin to turn our attention more to the people we 
work with, because they hold the key to the accelera- 
tion of creatively building capability - and therefore 
the creation of new value. 

More generally, stocks of existing assets, including 
information and knowledge, diminish in value relative 
to flows of new ideas and experiences that can help 
accelerate our capability building. In many cases the in- 
stitutional ability to accelerate capability building will 
depend as much on position in relevant flows as on 
the attributes of the institution itself. For this reason, 
this new worldview emphasizes the importance of the 
evolution of local ecosystems, global process net- 
works and communications and transportation infra- 
structure rather than focusing on institutions in isola- 
tion. 





Adapted from The Only Sustainable Edge: Why Business 
Strategy Depends on Productive Friction and Dynamic 
Specialization, by John Hagel Iil and John Seely Brown, 
with permission of Harvard Business School Press. 
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Three books look at dwindling U.S. talent, project manage- 
ment and the realities of real time. BY THOMAS HOFFMAN 
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CLASS 


u 


lobal ( Ompetition for Talent 


RICHARD 


The New G 


@ The Flight of the Creative Class: The New 
Global Competition for Talent, by Richard 
Florida (HarperBusiness, 336 pages, 
$25.95). For decades, the U.S. has reigned 
as the world’s center for innovation, be 
it in high tech, science or entertainment. 
And as Florida astutely observes, “Of 
critical importance to American success 
this last century has been an influx of 
global talent,” from Scottish-born steel 
titan Andrew Carnegie to the Hungari- 
an co-founder of Intel, Andy Grove. 

But as Florida, the Hirst Professor at 
George Mason University’s School of 
Public Policy, argues, a combination of 
factors, including better occupational 
and educational opportunities in 
places like Singapore and India, are 
leading to a global war for creative tal- 
ent — a battle that he believes the U.S. 
is positioning itself to lose. 

Tighter immigration and visa poli- 
cies that have been adopted since 9/11 


| are leading an increasing number of for- 

| eign-born graduate students to enroll 

| innon-U.S. universities and to work 
outside the country in more-receptive 
environments. But that’s just one of the 
problems that’s diminishing the na- 
tion’s ranking as a key destination for 
creative workers, says Florida. 

He also notes that 40 million people, 
or roughly 30% of the U.S. workforce, 

"are members of what he terms the 
eative class” — people who are em- 
hloyed in industries ranging from sci- 
nce and engineering to the arts and 
white-collar professions such as law. 
But that leaves the other 70% strug- 
gling to survive in lower-paying manu- 
facturing and service-industry jobs, a 
situation that Florida says is “exacer- 
bating economic inequality.” 
Aeanwhile, regions such as Banga- 
lore, Tel Aviv, Singapore and Beijing 
are aggressively recruiting foreign 
technology companies and investing 
heavily in higher education and in re- 
search and development. 

In this smartly written and well- 
documented book, Florida calls upon 
government, business and academic 

| leaders — as well as everyday citizens 
— to develop something as large-scale 
as the New Deal to build a fully cre- 
ative society. Even those readers who 
disagree with Florida’s anti-isolationist 
views will find this well-crafted tome 
thought-provoking and worthwhile. 


@ The Rational Project Manager: A Thinking 
Team's Guide to Getting Work Done, by An- 
| drew Longman and Jim Mullins (John 
Wiley & Sons Inc., 256 pages, $27.95). 
Savvy project managers know that the 
biggest roadblocks to delivering proj- 








ects on time and within budget and 
scope are typically organizational iner- 


| tia and people issues. The authors, 
| who are consultants at Kepner-Tregoe 


Inc. in Princeton, N.J., do a deft job of 


| addressing these topics while incorpo- 
| rating their organization’s problem- 
| solving and decision-making techniques. 


They also provide a useful perspec- 


| tive on why today’s projects are differ- 
| ent from those that came before. For 

| example, they point out the challenges 
| of managing a project that’s planned by 


one group and implemented by another. 
The book includes a chapter devoted 


| to managing people, and although some 


of the authors’ suggestions may come 
off as no-brainers (“Does the performer 
have the necessary knowledge and skill 
to perform?”), they address fundamen- 
tal questions that project leaders should 
continually be asking themselves. 

The authors raise issues that are 
rarely included in project management 
texts, such as the importance of obvi- 
ous questions like, “Why are we doing 


this project?” Also of value are tips and 
pitfalls boxes throughout each chapter. 
Given the increasing amount of 


| complexity that today’s project man- 


agers face, it’s refreshing to come 


| across a book that does such an effec- 


tive job of breaking these challenges 


| down into bite-size portions. 


| m@ The Real-Time Enterprise: Competing on 


Time With the Revolutionary Business SEx 
Machine, by Peter Fingar and Joseph 


| Bellini (Meghan-Kiffer Press, 224 pages, 
| $34.95). The notion of a real-time en- 
| terprise (RTE) that’s able to sense and 


respond quickly to customer demands 
and market shifts has been around for 


| years. But in the real world, only a few 
| companies, like Dell Inc. and Cisco 


Systems Inc., have been able to pull 


| this off, in part by leveraging business 
| process management systems to flatten 


their operations and differentiate 
themselves from competitors bound to 


| old technologies. 


Fingar, an executive partner at The 
Greystone Group LLC, and Bellini, a se- 
nior vice president in the software prod- 


| ucts and services group at Brooks Au- 


tomation Inc., do a proficient job of doc- 


| umenting the successes of RTE pioneers, 


including General Electric Co., The Pro- 


| gressive Corp. and Wal-Mart Stores Inc. 
| The authors detail how they became 


more responsive to customers and mas- 
tered business process management to 
help them dominate their markets. 
Although the authors underscore the 
eed for organizations to provide 
ers with ample time to absorb the 
ess changes that come with RTE, 
ley devote just two and a half pages 
© the most critical requirements for 
success — people and corporate cul- 
ture. (Note: “SEx Machine” refers to an 


| acronym for strategy and execution, 
| not to be confused with James Brown’s 


| 1970 funk classic.) @ 54236 
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IT Infrastructure 


® July 13-15, San Diego 

Sponsor: Burton Group 

Catalyst Conference North America in- 
cludes multiple tracks and topics, such 
as the business justification for identity 
management, the future of the net- 
work application platform, implement- 
ing Web services, the right VPN for re- 
mote access, preparing networks for 
IP telephony, and evolving security 
strategies. 
www.burtongroup.com/catalyst 


IP Communications | 


@ July 13-15, Boston 

Sponsor: Wainhouse Research 
WR Summit 2005: Driving the Enter- 
prise With IP Communications in- 
cludes directions in video and collabo- 
ration, marrying videoconferencing 
with HDTV, videoconferencing and 
other synchronous technologies in ed- 
ucation, the managed services conun- 
drum and transforming business com- 
munications with embedded collabo- 
ration. www.wainhouse.com/ 
wrsummit 


Leadership 


@ July 27-29, Annapolis, Md. 


Sponsor: The Conference Board Inc. | 


Topics of the 2005 Leadership Excel- 
lence Summit: Ethics, Integrity & Char- 


acter include building a culture of lead- | 


ership excellence; decision-making; 


authenticity, credibility and trustworthi-_ | 


ness; leadership challenges of a com- 
pany in transition; transformational 
leadership; and globalization of leader- 
ship concepts. www.conference- 
board.org/conferences 


ITIL Processes 


® Aug. 10-11, Scottsdale, Ariz. 
Sponsor: Pink Elephant 

ITIL Implementation Road Map in- 
cludes topics such as establishing a 
service desk according to the Informa- 
tion Technology Infrastructure Library; 
defining an ITiL-enabling organization 
structure and process roles; integrat- 
ing people, processes and technology; 
IT governance; building an IT service 
management improvement plan; and 
implementing configuration manage- 
ment. www.pinkelephant.com/ 
conference 








MANAGEMENT 


GARY H. ANTHES 


www.computerworld.com 


We're Mad 
As Hell, But... 


HAVE A FANTASY that goes like this: I’m download- 
ing some software from a vendor’s Web site, and 
I’m presented with a screen with many lines of 
tiny type followed by two boxes. One says “I 
accept,” and the other says “I do not accept.” 

I’m feeling lucky — or maybe just cantankerous — so 

I click the “I do not accept” box. The download comes 


to an abrupt end. 


But a few moments later, 

I receive an e-mail from the 
software vendor. “Dear sir,” 

it says, “we couldn’t help 

noticing that you rejected 

our license agreement, the 

one that gives us all the 

rights and you no remedies 

when our software crashes 

or admits hackers, as it 

surely will. Frankly, we 

don’t blame you. As buyers, 

we'd never sign anything 

like that either. But we real- 

ly, really, really want your 
business, so we are going to let you 
have the software anyway. We just ask 
that you keep this quiet.” 

Fantasy, indeed. But recently, I was 
given hope that packaged software li- 
cense agreements, surely the most lop- 
sided in all the world of commerce, 
might be changing. Two of the IT lu- 
minaries I interviewed for Computer- 
world’s recent special report on the fu- 
ture of IT [QuickLink 52738] said the 
time is ripe for software buyers to as- 
sert themselves. Users are so fed up 
with bugs, bloatware and security 
flaws that they will finally rise up and 
demand guarantees and remedies from 
vendors, they said. 

At about the same time, The Wall 
Street Journal published a story saying 
that customers are “starting to press 
software makers to assume responsi- 
bility for faults and pick up some of 





the costs.” The Journal 
noted darkly that “even a 
whisper of the ‘L word’ — 
liability — sends shudders 
through the software in- 
dustry.” 

But after poking into this 
issue, I found few shud- 
ders among either sellers 
or buyers. Vendors have 
no plans to change, and 
while users grumble, for 
the most part, they accept 
the status quo. 

Buyers’ legal leverage is 


| apparently so weak that when I asked 


Mark Grossman, an attorney at DeWitt 
Grossman PL, what advice he gives 
clients, he cited IT measures, not legal 
ones: “Redundancy, backup, bringing 
in security consultants and patching 
the holes.” 

So my plan to write a front-page 
story with a catchy headline like 
“Software Customers Cast Off Their 
Chains” or “Users Mad as Hell, Not 
Going to Take It Anymore” evap- 
orated. 

But that’s not quite the end of the 
story. David Weidenfeld, an attorney 
at McDonald’s Corp. who specializes 
in IT procurement, says nothing much 
has changed in recent years when it 
comes to buying packaged software. 
But, he insists, it’s not true that buyers 
have no leverage. Whereas Joe Con- 
sumers like me won’t get anywhere by 





clicking the “I do not accept” button, 
it’s a different story for corporate buy- 
ers. “There are things you can do,” he 
says, “but you have to work really hard.” 
For example, Weidenfeld says, it took 
him months of negotiation to get a soft- 


ware vendor to amend its boilerplate 


contract to close what he saw as a seri- 
ous security loophole. The software 
had a back door — which the vendor 
told customers about — by which it au- 
tomatically reported usage of the soft- 
ware for purposes of verifying compli- 
ance with licensing terms. But Weiden- 
feld insisted on a provision that stipu- 


| lated to the vendor, “You will have no 
code in this software that’s not part of 


the business application, and if you do, 

and anything happens, you are respon- 

sible for all the damages that occur.” 
Although Weidenfeld achieved a sig- 


nificant victory, he says too often the 


purchasing and legal people negotiat- 


| ing with software vendors are not 


trained in IT, are not part of the IT de- 
partment and by habit focus on price 
negotiations. “They say, “This is not 


| the mainstream of our business. I low- 


ered the price a little; I’m happy, let’s 
get out of here.’” 

Weidenfeld says that to break this 
mind-set, all procurement of IT 
should be consolidated under the CIO, 
but he notes that the CIO may need a 
significant boost in staff and budget to 
handle the load. 

Successful negotiating is a matter of 
hard work and resolve, he says. “If you 
aren’t prepared to give the vendor a 
flat ‘no, or a ‘not now,’ there’s a limit 
to what you can accomplish.” 

So when the time is right for that 
front-page story, perhaps the headline 
will say, “Users Work Like Hell, Not 
Going to Take it Anymore.” @ 54237 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 








NO 
MEANS MORE POWER 
MORE AFFORDABLY. 


Find out how to get the power of gigabit for less. 
Visit www.hp.com/networking /gigabit for our latest gigabit promotions. 


ProCurve Networking 


HP Innovation 


CLICK www.hp.com/networking/gigabit NTACT your local HP reseller 


*Lifetime warranty applies to all ProCurve Products, excluding the ProCurve routing switch 9300m Series and Secure Access 700wI Series, which have a one-year warranty with extensions available 
©2004 Hewlett-Packard Development Company, L.P 
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For over 20 years, Syntel employees across North America, Europe, and Asia 
have helped build advanced information technology systems for leading 
Fortune 500 companies and government organizations to improve their effi- 
ciency and competitiveness. Today, Syntel professionals are building 
rewarding careers by providing solutions in e-business, CRM, Web Design 
and Data Warehousing. Come discover why Syntel has been ranked one of 
“The 200 Best Small Companies in America” for the last four years in a row. 


Due to our rapid growth, 


we have immediate, full-time opportunities for both 


entry-level and experienced individuals in the following positions: 


Business Development/Account Specialist 
Manage Sales activities and achieve sales quota for assigned territory. Help 
Syntel's sales leadership in planning and rolling out an inside sales strategy. 


Project Leaders/Managers 

Train and manage programmer analysts on installation and configuration of 
hardware and software application, as well as be responsible for project 
planning an quality assurance. 


Programmers/ Analysts 
Analyze, design, develop, test, and maintain relational database 


management systems. 


The above-mentioned positions should possess any 


Mainframe 


* IMS DM/DC or DB2, MVS/ESA, 


COBOL, CICS 


DBA 
* ORACLE OR SYBASE 


Client-Server/WEB 
* Ab-initio 

* Websphere 

* Com/Dcom 

* Web Architects 

* Datawarehousing 

* Informix, C or UNIX 


* Oracle Developer or Designer 


2000 
© JAVA, HTML, Active X 
© Web Commerce 


* SAP/R3, ABAP/4 or FICO or MM 


&SD 


of the following skills: 


* Focus, IDMS OR SAS 


* DB2 


* Oracle Applications & Tools 

* Lotus Notes Developer 

e UNIX System Administrator 

© UNIX, C, C++, Visual C++, 
CORBA, OOD or OOPS 

© WinNT 

© Sybase, Access or SOL server 

* PeopleSoft 

* Visual Basic 

* PowerBuilder 

° |EF 


Some positions require a Bachelor's degree, others a Master's degree. We 
also accept the equivalent of the degree in education and experience. 

With Syntel (NASDAQ: SYNT, you'll enjoy excellent compensation, full ben- 
efits, employee stock purchase plan and more. Please forward your resume 
and salary requirements to: Syntel, Inc., Attn: Recruiting Manager-LD06, 525 
E. Big Beaver, Suite 300, Troy, Mi 48083. Phone: 248-619-2800; Fax: 248- 
619-2888; Equal Opportunity Employer. 


SYN TEL 


PROGRAMMER ANALYST - 
Tompkins Dental Health PC 
(ithaca, NY), seeks Programmer 
Analyst to analyze, design & 
implement web-based applica- 
tions & customized business 
software. Must possess exp in 
the following skill sets: C, C++ 
Visual Basic, Oracle & JAVA 
Candidates must conduct busi- 
ness analysis, generate reports 
conduct systems studies & pro- 
vide training to end-users of 
computer technology. Competi- 
tive salary. Please apply w/2 
copies of resume to: HRD 
Tompkins Dental Health PC 
23 North Triphammer Rd 
ca, NY 14850 


Senior SAP Analyst 
Functional Consultant SAP/SD 
Bach. of Eng. or related or for. 
eq. wi 5 yrs. progressively 
responsible post Bach. exp. or 
Master's or for. eq n Eng 
Mgmt. or related 
SAP 4.6B or higher 
end implem/integ exp with 
MM,SM,FI,PS,MySAP,EDI 
Willing to relocate frequently 
SD Certifications preferred 
Resumes to 
People, Inc., Seven Parkway 
Center, Suite 679, Pittsburgh 
PA 15220 


3 yrs. exp. 


1 end to 


Technology 


E Computer Technologies, Inc 


Systems Analysts: Analyze 


develop, integrate and Test 


Multi-Tier Enterprise Applica- 


tions using J2EE, UML, VB.NET, 


and Abinitio technologies using 
database in Oracle and SQL 
Server. Req. 2 yrs of exp. Send 
resume to H.R. E Computer’ 
Technologies, inc., 777 South 
Central Expy Ste# 4-F 
Richardson, TX 75080 or E-mail 


tavi@ecomputertech.com 


Computer Software 


Engineer w/iexp. in 


Visual C/Basic. Mail to 


Silicor Technologies, 


15760 Ventura Blvd., 


#1250, Encino, CA 


91436 or email to: 


hr@silicor.com. 


Sr. Software Application Devel- 
oper sought by GAVs in Denver, 
CO to design and develop data- 
base-related ETL (Extraction 
Transformation and Loading) 
client/server software applica- 
tions for Oracle Relational Data- 
base Management Systems on 
a UNIX platform. Requires mas- 
ter's or equivalent (bachelor's 
plus 5 yrs progressive software’ 
development experience) in 
Computer Science and working 
knowledge of Infomatica, Unix 
and Oracle. Respond by resume 
to Asha Vasant, GAVs Informa- 
tion Services, 4155 E. Jewell 
Ave., Suite 603, Denver, CO 
80222 
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Business Systems 
Manager - Admin, 
mng, maintn comp 
sys & busi apps. 
Comp Sci edu, DBA 
cert, ERP exp. See 
www.prattinc.com/job 
s.htmi. Pratt  Ind- 
ustries, Belleair 
Bluffs, FL. Contact 
Sridhar Anandula, 
Sridhar.reddy@prat- 
tinc.com 


Senior Quality Analyst 
Test, maintain, implement, trou- 
bleshoot, and monitor comp. 
programs & systems, incl. coor- 
dinating installation of comp 
progs. & systems. BS or for. 
equiv. Comp. Sci. or related w/ 5 
yrs. prog. responsible post 
Bach. exp. or Master's in Comp 
or related 2 yrs. exp 
GPRS, CDMA, TCP/IP. 
Multicast routing proto- 
AToM, Frame Reiay 
HDLC, PDP, QoS, VPN software 
solutions. Willing to relocate fre- 
quently. Resumes to: Tech- 
nology People, Inc., Seven 
Parkway Center, Suite 679. 
Pittsburgh, PA 15220 


VALIDATION ENG. —- 
Anize & validate pharm 
mfg. process & proto- 
cols. Req'd: BS in 
Eng'g., & 1 yr. exp. 


Resumes: Forest Lab- 


oratories, Inc., 500 
Commack Road 
Commack NY 11725. 
Attn: D. Cadawallader 


Zaishui Jia, M.D., PA., 
located in Missouri City, 
Texas seeks an experi- 
enced & degreed data- 
base administrator on a 
full-time basis to design & 
maintain electronic med- 
ical management & patient 
claims database systems 
Send resume to: Practice 
Administrator, 5201 High- 
way 6, Suite 500, Missouri 
City, Texas 77459. Put job 
code DB2101 on resume 


Software Engineering Manager 
Software co. seeks software eng 
manager. Successful candidate 
will manage, supervise and 
direct the design & development 
of interface and rating engine for 
the billing, customer care and 
POS business needs. Will work 
in MFC environment using MS 
SQL. Send resume to: ARIS. 
Inc. 10681 Foothill Bivd. Suite 
100, Rancho Cucamonga, CA 
91730 or email 
sejobs@arisinc.com 


Senior Business 
Systems Analyst 


Lead & manage large scaie 
implementations of technology- 
enabled business solutions. 
Define systems strategy, dev 
system req.. design & prototype 
Represent company in PMO or 
equiv. as single point contact for 
client. Masters or for. eq. in 
Business, IT or related or Bach 
or for. eq. in Business, IT or 
related plus five years of pro- 
gressively responsible post 
Bach. exp. 3-4 years Oracle 
SCM Modules (ASCP.ODP, C 
MS & GOP). 3+ full life cy 
implementations of same Orac’ 
SCM Modules including exp 


Willing to relocate fre- 
Resumes to Cc 
People, inc 
Parkway Center, Suite 
Pittsburgh, PA 15220 


Sr. Systems Analyst 


mplement, dev. & upgrade 
Oracle Apps. using 111, OPM 
GL, PA, OM, AOL, Forms 
Reports. Masters or for. eq. in 
Comp. Sci. or Bus. Admin. or 
related or Bach. in Comp. Sci. or 
Bus. Admin. or related plus five 
years post bach. progressively 
responsible exp. Must have two 
yrs. of demonstrable prof. exper. 
using Oracle Appl 111 
Techno/Functional using OPM 
Oracle Fin., Forms, PL/SQL 
loaders, TOAD and Unix Shell 
Scripting. Willing to relocate fre- 
quently. Resumes to: Tech- 
nology People, inc.. Seven 
Parkway Center, Suite 679. 
Pittsburgh, PA 15220 


Seismic Micro-Technology, Inc 
seeks a Software Testing 
Engineer to test geoscience. 
petroleurn engineering software 
M.S. plus 1 yr. exp. Send 
resume to 8584 Katy Fwy, #400, 
Houston, TX 77024 Attn 
Manager of HR or 713-464- 
6440(F 


Turner Collie & Braden, Inc 
(Houston, TX) seeks System 
Analyst Ill to develop and sup- 
port complex engineering hard- 
ware/networks/systems. M.S 
plus 1 yr exp. Send resume to 
careers@tcb.aecom.com with 
job code PC-1 


Software Consultant - 
Miami, FL & other US loca- 
tions as required. Design 
program, & test banking s/w 
Universe Basic, 
Visual Basic 6, MS SQL 
Server, ASP 3.0, VB Script 
Reqs: BS/CS/Eng/IS or 
related & 3 yrs. exp. Apply 


systems 


to K. Murray, HAI Assoc 
880 Apollo St., # 357, El 
Segundo, CA 90245 


ATTENTION: 


eed 
ere 
Staffing Agencies 


Place your 
Labor Certification 
ads here! 


Contact: 800-762-2977 
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Spyware 


consent. Both bills still have to | 


be approved by the Senate and 
signed by President Bush. 
Robert Olson, a systems ad- 
ministrator at Uline Inc., a 
Waukegan, IIl.-based distribu- 
tor of packing and shipping 
materials, said he’s “ecstatic” 
that Congress is taking action 
against spyware. “The biggest 


Sy NA EUS 
pete : 





Continued from page 1 


DB2 


the mainframe version of DB2. 
The analyst, who asked not to 
be named, noted that as part 
of a long-term strategy, his 
company is looking to move 
applications to Windows. He 
said he fears that the firm will 
eventually replace DB2 with 
Microsoft Corp.’s SQL Server 
database companywide. 

That message was repeated 
often by users at the confer- 
ence and elsewhere. Although 
customers said they’re gener- 
ally pleased with the technical 
direction of DB2, some said 
IBM needs to step up its mar- 





keting of both its flagship 


win we get out of this is the 
availability of a solid defini- 
tion that antispyware vendors 
can start working with” to 
identify and block offending 
programs, he said. 

But like Gelfound, Olson 


| said stopping spyware coming 


from overseas won't be easy. 
“There’s really no way to en- 
act the penalties against some- 
body who is pushing these 
things from outside the coun- 
try, unless you get other gov- 
ernments to agree,” he said. 
The bills would establish a 
useful definition of what con- 
stitutes spyware, said Pete 
Lindstrom, an analyst at Spire 
Security LLC in Malvern, Pa. 


“They provide a framework for | 


deciding what exactly is good 
and what’s bad,” he said. 

Several vendors of antispy- 
ware tools have been sued by 
companies that serve up Inter- 
net advertising, claiming that 
their products were being er- 
roneously identified as spy- 
ware. Lindstrom said the bills 
approved by the House “ 
good job of assigning motives 
on people” in such cases. 

One of the bills that was 
passed last Monday seeks to 
prohibit practices such as us- 
ing spyware to hijack a Web 
browser, install programs that 


doa 


database technology and its 
Informix product line. 

Those users’ calls for more 
visibility from IBM came as 
Gartner Inc. released a report 
showing that Oracle Corp. re- 
covered ground in the world- 
wide relational database mar- 
ket last year to draw roughly 
even with IBM. According to 


Gartner, IBM’s sales grew 5.8% 


last year to $2.66 billion, com- 

pared with a 14.6% increase 

for Oracle to $2.64 billion. 
IBM had a 34.1% market 


share, compared with 33.7% for | 


Oracle, Gartner found. Micro- 
soft was a distant third with a 
20% market share, although 
Gartner said the company’s 
yearly revenue grew 18%. 
IBM “could do better mar- 
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FBI Broadens Scope of Replacement IT Project 


BY GRANT GROSS 

FBI DIRECTOR Robert Mueller 
last week disclosed more details 
about the agency's plan to de- 
velop a replacement for the un- 
finished case-management sys- 
tem it scrapped in March, saying 
that some other existing applica- 
tions will also be replaced as 
part of the project. 

The new system, called Sen- 
tinel, is due to be rolled out in 
four stages beginning late next 
year, Mueller told a Senate ap- 
propriations subcommittee. The 
FBI expects to have the full sys- 
tem in place by early 2009. 

Sentinel will incorporate the 
case management functions that 
were supposed to be supported 
by the Virtual Case File system, 
which the FBI shelved after a 


: Fa 
monitor keystrokes or modify 


PC settings. The proposed law 


| also requires that prominent 


opt-in notices be displayed by 
all programs that monitor and 


| collect information about the 
| online activities of users. 


The other bill would make 


| it illegal to use spyware pro- 
| grams to alter security set- 


keting [DB2] to small busi- 
nesses,” said Philip Nelson, a 


| database administrator and a 
| consultant at ScotDB Ltd. in 


Edinburgh. As a result of 
IBM’s push to automate DB2 
management routines, the 


| technology is potentially at- 


tractive to smaller companies 
that want to avoid heavy ad- 
ministration costs, he noted. 
Robert Omerza, president of 
Chicago-based IDUG and a 


| systems manager at United 


Parcel Service Inc., said that 
over the past year or two, IBM 
has recognized that there’s an 


| awareness gap about DB2’s ca- 


pabilities. IBM has started tak- 


| ing steps to address that gap 
| by marketing itself more to 
| the DB2 community and push- 


four-year, $170 million develop- 
ment effort [QuickLink 53125]. 

In addition, the new system 
will eventually replace applica- 
tions that the FBI uses to man- 
age criminal informants and 
track bank-robbery statistics, 
Mueller said. He noted that Sen- 
tinel will support XML technolo- 
gy for data-sharing purposes. 

The FBI doesn't yet have a cost 
estimate for the project, according 
to an FBI official who asked not to 
be identified. She said the system 
likely will be based on commer- 
cial software that has been 
tweaked to improve its security. 
The agency plans to issue a for- 
mal request for proposals to IT 
vendors by midyear. 

The FBI is “confident we're in 
a lot better position for the fu- 


tings or to access personal 
data for the purpose of de- 
frauding users (see chart). 
The proposed laws are good 
for dealing with “homegrown” 
spyware, said Jarrad Winter, 
network security manager at 
Western United Insurance Co. 
in Irvine, Calif. “But really, the 
most destructive stuff comes 


ing colleges to offer courses 


on the software, Omerza said. 


A user who runs DB2 on 
IBM’s iSeries systems but 


| didn’t attend the IDUG con- 


ference said that IBM would 
have to invest a lot of money 
to alter the perception that 


| DB2 is a contender on plat- 
| forms besides the iSeries. 


“We typically don’t even 
think DB2 when we think of 
other platforms” like Linux 
and Unix, said William Gabby, 
North American operations 


| manager at Cargill Inc.’s Glob- 
| al Financial Solutions unit in 
| Minnetonka, Minn. 


For its part, IBM says it’s cre- 
ating partnerships and invest- 
ing resources to promote DB2. 


| Paul Rivot, director of compet- 
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ture” with Sentinel, the official 
said. “The capabilities will go 
well beyond Virtual Case File.” 
In written testimony to the 
Senate subcommittee, Mueller 
said the FBI will be able to grad- 
ually add IT capabilities with 
Sentinel. “We will roll out key 
technical services in phases, 
such as records and case man- 
agement capabilities, to smooth- 
ly transition into the new system 
while retiring legacy applica- 
tions,” he wrote. @ 54659 


Gross writes for the IDG 
News Service. 
The FBI seems to have figured out 


how modern IT systems development 
is done, Frank Hayes says. PAGE 46 


from overseas,” he said. “So in 
the grand scheme of things, I 
don’t think this will make a big 


difference.” 


What's also needed, Winter 


| said, is a continuing focus on 
| developing better technical 
| fixes for identifying, weeding 


out and stopping spyware pro- 


grams. @ 54686 


itive technologies and strategy 


| in IBM’s information manage- 
} ment division, cited an alliance 


with SAP AG that was an- 
nounced in April under which 
IBM will optimize DB2 to bet- 
ter run with SAP applications. 
IBM also launched a recent 
blitz that involved 2,000 sales 
representatives calling on Or- 


acle customers to propose 


| switching to DB2. 


DB2 is a solid product tech- 
nically, said James Governor, 
an analyst at RedMonk Inc., a 
consultancy in Bath, Maine. 
However, when IT users think 
of DB2, he noted, they see a 
high-end database rather than 
what it really is: a broad family 
of products that meet a wide 


range of needs. @ 54683 
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FRANKLY SPEAKING ® FRANK HAYES 


FBI on the Move 


OW FAST CAN THE FBI MOVE? Last week, FBI Direc- 
tor Robert Mueller told a Senate subcommittee that 
the bureau is working on a new computer system that 
will let agents share information about cases they’re 
working on, but the software won’t go live for another 


year and a half (see story, page 45). 


If that sounds slow, you haven’t been paying attention. 

This new system, dubbed Sentinel, is replacing the Virtual Case 
File project. That’s the one the FBI officially spiked in March, after 
$170 million and four years of slipped schedules — and a mere three 


months after it became clear that Virtual Case 
File wasn’t going to do what the bureau needed. 

Truth to tell, when Mueller announced the 
end of Virtual Case File, I hoped for the best 
and expected the worst. Killing a big IT project, 
especially a big government project, isn’t easy. 

In fact, the official position of Science Appli- 
cations International Corp. (SAIC), the contrac- 
tor on the old project, was that Mueller was 
wrong, Virtual Case File wasn’t dead, the 
software was still being tested, and the FBI 
wouldn’t be making any decisions on what 
to do next for three months or more. 

I assumed that between politics and bureau- 
cratic foot-dragging, that last estimate would be 
close to correct, even though SAIC was wrong 
about everything else. 

Two months later, there’s a new project with 
a workable schedule and a phased rollout. 
That’s impressively fast. 

Equally impressive is what the FBI has 
learned from the failure of Virtual Case File. 
According to Mueller’s prepared testimony be- 
fore that Senate appropriations subcommittee, 
Sentinel will be developed and put into use in 





four distinct phases. Functions of legacy appli- 
cations will be rolled into each 

phase so they can be tested and 

implemented before the legacy 

systems are retired. 

Each phase of system develop- 
ment will deliver stand-alone capa- 
bilities. And each phase will be fully 
funded before work starts, so the 
project won’t be orphaned or stran- 
gled because of budget cuts over the 
next three to four years. 

Yes, it’s nice that Sentinel will 
also be fully buzzword-compliant: 
Mueller told the senators the sys- 
tem will use XML to facilitate infor- 


mation sharing, which must have impressed the 
politicos greatly. But the actual technology is 
background noise. 

What’s important is that the FBI seems to 
have figured out how to do modern IT systems 
development. And its chief executive — 
Mueller — appears to be fully behind a process 
of quick delivery of usable work, incremental 
rollouts and flexible implementation. 

Mueller gets it. He supports it. And he’s mak- 
ing the decisions to make it happen fast. 

How did that come to be? Mueller has report- 
edly always taken an interest in IT, but he’s no 
techie. Someone helped him get a clear picture 
of the development process — not just the bot- 
tom line — so he could give it the executive 
support it needed. 

That someone was most likely Zalmai Azmi, 
who’s been serving as the FBI’s CIO since last 
year. But whoever it was, getting Mueller up to 
speed meant Mueller looked a lot smarter in 
front of the senators holding the purse strings 
last week. And Mueller, in turn, could better 
support the FBI’s IT needs. 

And instead of squeezing through bureau- 
cratic bottlenecks, the FBI is on a fast track to 

getting Sentinel working. 

Will Sentinel hit all its marks and 
go live starting at the end of 2006? 
Maybe; maybe not. At least now it 
has a chance. 

We talk a lot about the impor- 
tance of getting top-level executive 
support for IT initiatives. But we 
don’t often get to see such a clear 
example of the benefits — both for 
IT and the boss. 

We still don’t know how fast the 
FBI can move. But now at least we 
know why the FBI can move fast. 
@ 54648 





The Easy Way, the Hard Way 
Engineer gets an e-mail from sales that contains a 
copy of a fax inquiry from a customer. Is there a way 
of telling from this message what the customer's fax 
number is, so | can reply that way? he asks IT pilot 
fish. “Naturally,” says fish. “All | had to do was call the 
originating sales guy to get the fax number, and then 
pass it along to the engineer - who is now even more 
amazed at the technical genius of the {T department.” 


Um...No ly announces, 
There's a com- ‘I'm there, now 


meatteoue TANK. 


ing that houses 

this hospital's copy and: Human resources direc- 
bulk mail center. No pa- {eee 
tients are affected, but | employee manual on the 
net admin pilot fish cals | Seeaueutepe. nt 
tech connected me toa: puts the e-manual ona 
secretary,” says fish. “I nd sugge 


{old her needed to send | Hectares e in- 


an ‘all user’ e-mail to 
notify everyone that 


| eapy could alo be hand 


GIVE SHARKY A HOLLER. Send your true tale of IT 

life to me at sharky@computerworld.com. You'll 
score a sharp Shark shirt if | use it. And check out the daily 
feed, browse the Sharkives and sign up for Shark Tank 
home delivery at computerworld.com/sharky. 
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software — in a single, seamless product. This is the 
complete ensemble of technologies needed for rapid 
integration, fast development, and easy management. 

These innovations mean all of your integration 
projects will be completed on time and on budget, 
with a simplified learning curve for your IT staff. 

We back these claims with this money-back guarantee: 
For up to one year after you purchase Ensemble, if you 
are unhappy for any reason, we'll refund 100% of your 
license fee.* 

Innovative integration. Guaranteed performance. 


InterSystems 


ENSEMBLE 


For a free copy of CACHE, or to request a free ENSEMBLE proof-of-concept project, visit www.InterSystems.com/Free8A 


*Read about our money-back guarantees at the web page shown above 
© 2005 InterSystems Corporanon. Ai! ngbts reserved. LnxerSystems Cache and InterSystems Ensembie are trademarks of InterSystems Corporapon. 5-05 Combolano8ColWo 





Put a world leader 


in blades and Linux to work for you. More and more businesses are g th System servers are the tool their data center ne 
HP’s blac > opt ed for Linux. Not only do they st owe Sc | e stems Insight Manager™ and ProLiant Essentials 
vare partners like PeopleSoft and Orac And with po. -roce s, you get maximum performance 
to 64-bit computing now or in the future short, HP offers A f blades, Lir endary HP reliability 


logy and advic 


THE SOLUTIONS THE BENEFITS 


| 
| 
| 
} 
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| *BL25p: 2 AMD Opteron™ Processors Model 200 he Up to 23% savings on acquisition cost 

| (up to 2.60GHz) 

| *BL35p: 2 AMD Opteron™ Processors Model 
HP Proliant BL25p Blade Server | (2.40GHz) | + Up to 93% fewer cables 

| *BL25p: Up to 48 servers per rack | 


* Up to 23% less power consumption 


: * 43% less space needed for same number of processors 
* BL35p: Up to 96 servers per rack 
* HP Systems Insight Manager™ for Web-based * Hot-swappable server design 
networked management through a single console * Single interface for local and remote management 
* Rapid Deployment Pack for ease of deployment and of servers, storage, software and networking 
ongoing provisioning and reprovisioning in Linux 
mixed OS environments (op' 


HP ProLiant BL35p Blade Server 


Enhance your system. | HP STORAGEWORKS MSA1500CS 


Up to 24TB of capacity (96 250GB SATA drives) - Up to 16TB of capacity 


greater flexibility - 2GB/1GB Fibre connections to host flexibility 


Save up to $844 on the 4-hour response, 24-hour-a-day, 3-year warranty upgrade’ 


Save $1,744 when you purchase an HP BladeSystem enclosure 
and 8 BladeSystem Management Suite Licenses? 


AMD 


CALL 1-866-625-3575 


Opteron CLICK www.hp.com/go/bladesmag46 


CONTACT your local reseller 


rator, please visit: http://n3009 lo a 31/0 0 0 S a-day, three-year warranty upgrade 
re and eight Blade’ n Management Suite licenses. Offers va t e nt and are good while supplies last. See Web site for full details. 
Redwood City AMD, the AMD Arrow Logo, AMD Opterc C \ 105 Hewlett-Packard Development Company, L.P. 





